Which AI tools are in use
An up-to-date inventory of the AI applications and AI websites used on your devices, including shadow AI that nobody approved. AI discovery
AI compliance
AI compliance you can evidence.
Regulators, clients, auditors, and insurers increasingly ask how your organisation controls the use of AI. AI Assure is an AI compliance tool that gives you the inventory, the policy, and the records to answer with confidence.
What good AI governance looks like
Six things you need to be able to show.
Most AI governance and compliance questions come back to the same points. AI Assure covers each one.
A written AI use policy
A clear policy that tells people which AI tools they may use and what they must never enter into them. AI policy builder
Rules that are applied
Approved tools keep working and unapproved ones are blocked, for the whole company, a site, a department, or a single device. Policy controls
Evidence over time
Reports on AI activity, policy coverage, and blocked use, exported as PDFs, backed by an audit record of policy and account changes. Reports and evidence
Where you stand today
A scored view of your AI readiness across governance, data, security, and people, and what to fix first. AI readiness assessment
Respect for privacy
Oversight without surveillance: AI use is recorded by service name only, never prompts, files, or responses. Trust and privacy
Laws, standards, and questionnaires
How AI Assure supports your obligations.
UK GDPR and the Data Protection Act 2018
Personal data typed into an unapproved AI tool can leave your control. Knowing which AI services are used, blocking the ones you have not assessed, and keeping records helps you meet your accountability duties and supports data protection impact assessments.
EU AI Act
Organisations based in the EU, or offering services there, may need to take measures to support AI literacy among staff and other people who use AI systems on their behalf. Article 4 has applied since 2 February 2025. An AI inventory and a written policy are useful starting points.
ISO/IEC 42001
The international standard for AI management systems expects an AI policy, an understanding of the AI you use, controls, and monitoring. AI Assure provides the inventory, the controls, and the monitoring records to bring to your management system.
Client, supplier, and insurer questionnaires
Due diligence and cyber insurance questionnaires now ask which AI tools you allow and how you control them. Answer with your current policy and an up-to-date report, rather than a best guess.
Where each kind of evidence helps
A summary of the points above: the evidence from AI Assure that each set of rules or questions most often calls on.
| Rules or questions | AI tool inventory | Written AI policy | Rules applied on devices | Records of AI use | Audit history |
|---|---|---|---|---|---|
| UK GDPR and the Data Protection Act 2018 | Helps | Not the main point | Helps | Helps | Not the main point |
| EU AI Act, AI literacy (Article 4) | Helps | Helps | Not the main point | Not the main point | Not the main point |
| ISO/IEC 42001 | Helps | Helps | Helps | Helps | Helps |
| Client, supplier, and insurer questionnaires | Helps | Helps | Helps | Helps | Not the main point |
General guidance, not legal advice. AI Assure provides evidence for your own reviews; it does not certify compliance.
Two-minute check
Which AI rules are relevant to you?
Answer five quick questions for a plain-English summary of the rules and expectations most likely to apply to your use of AI. General guidance, not legal advice.
Where does your organisation operate?
Do people use AI tools with personal data, such as customer, patient, or staff details?
Do you use AI to help make decisions about people, such as hiring, lending, or access to services?
Which best describes your sector?
Do clients, auditors, or insurers ask how you control AI?
Answer the questions to see your summary.
What is likely to be relevant
General guidance based on your answers, not legal advice. Rules change; check current guidance or take advice for your situation.
Getting started
From unknown AI use to evidence in a day.
Install the agent on your Windows devices, and AI use starts to appear within minutes. Every company starts with a report-only policy, so nothing is blocked until you decide.
- See where you standTake the free AI readiness assessment.
- Install the agentAI use starts to appear within minutes as devices check in.
- Decide and publishApprove, review, or block each tool the agent found, then publish your policy.
- Download your evidenceReports for your records, your board, and your auditors.
An example day. Your timing depends on how you deploy the agent.
About compliance
Evidence that supports your governance.
AI Assure gives you records of AI use and policy outcomes to support your own reviews, policies, and audits. It does not by itself certify compliance with any law, standard, or framework, and it is not legal advice. How you use the evidence, and whether it meets a particular obligation, remains your organisation's decision.