Skip to content
rh.Raghav R Handa
S/

Risk scan · 3 minutes

How ready is your product, really?

Twelve questions about your AI and data protection posture. You get a readiness profile, the audits worth starting with and the deadlines that may apply in your markets.

Where are your users?

  1. 01 · AI governanceWe have an up-to-date inventory of every AI model, API and feature in the product.
  2. 02 · AI governanceA named person approves new AI use cases before launch.
  3. 03 · AI governanceWe have assessed whether any AI use falls into a prohibited or high-risk category in our markets.
  4. 04 · Data foundationsWe can show where personal data enters, moves, is stored and is deleted.
  5. 05 · Data foundationsEach processing activity has a documented purpose and legal basis or consent route.
  6. 06 · Data foundationsWe know whether children use or are likely to use the product.
  7. 07 · Vendors & contractsWe have checked whether AI vendors can train on our or our customers’ data.
  8. 08 · Vendors & contractsOur DPAs and subprocessor list match the vendors we actually use.
  9. 09 · Users & transparencyUsers are told when they are interacting with AI or viewing AI-generated content.
  10. 10 · Users & transparencyPeople can request human review of significant automated decisions.
  11. 11 · Incidents & evidenceWe have a tested playbook for data breaches and harmful AI outputs.
  12. 12 · Incidents & evidenceWe could answer an enterprise AI or privacy questionnaire with evidence this week.