This is a sample workspace with made-up data. Sign up to run the same scan on your own.
Sample workspace
Nordweb AB · Compliance overview
148-person Swedish SaaS · Google Workspace and Microsoft 365 connected · Last scan three minutes ago
AI tools discovered
23
across 18 vendors
High-risk under the AI Act
3
need human oversight
NIS2 measures done
7 / 10
70% complete
Policies drafted
16
awaiting legal review
AI register
15 of 23 shownChatGPT Enterprise
OpenAI · Content generation
Art. 50(2) — disclosure of synthetic output
HireVue
HireVue · HR screening
Annex III, point 4(a) — employment
Salesforce Einstein
Salesforce · Marketing personalisation
Recital 27 — minimal risk
Pymetrics
Harver · HR screening
Annex III, point 4(a) — employment
Intercom Fin AI
Intercom · Customer support
Art. 50(1) — interaction with humans
Otter.ai
Otter.ai · Content generation
Art. 50(2) — synthetic output
Fireflies
Fireflies · Content generation
Art. 50(2) — synthetic output
Modern Hire
Modern Hire · HR screening
Annex III, point 4(a) — employment
GitHub Copilot
Microsoft · Content generation
Recital 27 — coding assistant
Gong
Gong.io · Data analytics
Recital 27 — sales analytics
Mutiny
Mutiny · Marketing personalisation
Recital 27 — web personalisation
Jasper
Jasper.ai · Content generation
Art. 50(2) — synthetic output
Cursor
Cursor · Content generation
Recital 27 — coding assistant
Apollo.io
Apollo · Marketing personalisation
Recital 27
Clay
Clay.com · Marketing personalisation
Recital 27
NIS2 · Article 21
Risk-management measures
Risk analysis and information security policy
Incident handling
Business continuity and backup
Supply chain security
Network and information system security
Vulnerability disclosure and handling
Cyber hygiene and training
Cryptography and encryption
Human resources security and access
Multi-factor authentication and secure communications
7 done · 2 in progress · 1 not started. Policy drafts for the remaining three are one click away.
From the agent
What to do this week, in order
P0HireVue — high-risk under Annex III, point 4(a). Draft the human-oversight policy and worker notification.Today
P0Pymetrics — high-risk under Annex III, point 4(a). Same set of actions.Today
P1Enable MFA for all admin accounts (NIS2 Art. 21(2)(j)).This week
P1Encryption-at-rest audit for the production database (NIS2 Art. 21(2)(h)).This week
P2Run AI-literacy training for the marketing team (AI Act Art. 4).This month
The audit report, in one click
Cover page, executive summary, the AI register with its citations, NIS2 measure status and the policy index — a printable PDF you can hand to a regulator, the board, or a customer's security questionnaire.
Now run it on your own workspace.
Sign up free and connect Google Workspace or Microsoft 365. The first register takes about twenty minutes.
Start free trial