GOVERNANCE / SECURITY / INTERNAL AUDIT

Set the context. Focus the plan.

From a question to a researched briefing, practical controls,
and the evidence your team needs.

Free to use. No account required.

Your AI context

Optional manual screening. Research can suggest a starting context for you.

Primary jurisdiction to screen

Industry

Primary AI use

What does the system involve?An external AI supplierPersonal or sensitive dataAI agents that can take actionsBiometrics or emotion inference

Use more than one jurisdiction? Run a separate screen for each.

05Sources
matched

01Priority
reviews

00Tasks with
evidence

Add a legal review of the jurisdictions your use case affects.

Screening prompts, not legal classifications. Confirm the facts with your legal and risk teams.

SOURCE LINKED GUIDANCE

FrameworkNIST

A voluntary structure for governing, mapping, measuring and managing AI risk across the lifecycle.

Voluntary global baseline

FrameworkNIST

A companion to the AI RMF addressing risks specific to generative AI, including unreliable outputs and information integrity.

Generative AI systems

StandardISO

An AI management system standard for organizations that provide or use AI. A certificate concerns its defined scope, not every legal obligation.

Voluntary unless contractually required

Security guidanceOWASP

A security reference for applications using large language models, including prompt injection, sensitive information exposure and excessive agency.

LLM applications