Your people are already using AI. Do you know where your data goes?
In five to six minutes, see how well your organisation governs and secures AI, from staff using chat tools and copilots through to AI agents acting on your systems. Built for the person accountable for IT, AI or risk. The questions adapt to how you use AI today.
From staff tools to agents
Chat tools, copilots, AI inside your software, and agents with access to your systems.
Five to six minutes
Only the questions that apply to you. Nothing is stored until you choose to share it.
Scores that fit how you use AI
Governance and security scored separately, plus your agents if you run them, with gaps ranked and what to fix first.
Your AI governance and security
Permissions and guardrails define what an agent is allowed to do. They don't tell you when an agent has been hijacked, or overreaches on its own, and is doing harm inside those permissions. To your security stack, that looks like an authorised action.
From 10 December 2026, organisations covered by the Privacy Act must say in their privacy policy when computer programs, including AI, make or substantially help make decisions that could significantly affect individuals. You told us AI may be involved in decisions about people, so check this now.
Thanks. Your full report is below, and a copy is on its way to your inbox.
How the stage is set: it follows the lowest of your scores. Leading is 85 or above; Managed is 70 or above; Developing is 40 or above; otherwise Exposed. If any critical control is answered No or Not sure, the stage can be no higher than Developing. Only the sections that apply to you are scored.
General information only. Not legal, privacy or compliance advice, and not a certification. Obligations depend on your organisation and how you use AI. Your answers are not stored until you choose to share them.