AI Compliance & Governance Risk

Know Your AI Risk
Before They Become Public Problems

The AI Exposure Audit™ is a structured, 44-question organizational assessment that scores your company's AI governance, data privacy, HR compliance, and incident readiness — and tells you exactly where you're exposed.

Start Your Audit — $249 See How It Works
Critical — Highly Exposed
High — Significantly Exposed
Moderate — Partially Protected
Low — Mostly Protected
Minimal — Well Protected
The Problem
AI Is Moving Faster Than Your Policies
Most organizations are using AI in hiring, performance reviews, and daily operations — without the governance, disclosures, or safeguards the law now requires.
⚖️

Laws Are Already in Effect

NYC Local Law 144, the Illinois AI Video Interview Act, the Colorado AI Act, and the EU AI Act create real compliance obligations right now. Most HR teams don't know which ones apply to them.

🕳️

Shadow AI Is Everywhere

Employees are using ChatGPT, Claude, and dozens of other AI tools without IT or Legal knowing. Every unapproved tool is a potential data leak, privacy violation, or discrimination claim.

📋

No Policy Means No Defense

When something goes wrong — biased hiring output, employee data in a vendor's training set, an AI-generated performance review — the absence of written policy is the first thing regulators look for.

🔍

You Don't Know What You Don't Know

Most organizations have blind spots — AI features quietly enabled in their HCM, ATS, or CRM platforms they never reviewed. The audit surfaces what's actually happening, not what you assume.

How It Works
Four Steps to Your Exposure Score
Designed for HR, Legal, IT, and Executive leadership. No technical expertise required.
1

Register Your Company

Create your account and set up your organization profile. Invite colleagues to contribute their perspective.

2

Complete the Assessment

Answer 44 structured questions across 9 compliance domains. Takes 20–30 minutes. No prior AI expertise needed.

3

Get Your Exposure Score

Receive a scored report with your overall Exposure Band (38–190 scale) and a breakdown by section so you know exactly where the gaps are.

4

Act on the Findings

The report includes a prioritized remediation guide with specific actions for every low-scoring area — no vague recommendations, just actionable next steps.

Score by Section
AI Governance & Policy
16/25
Data Privacy & Security Exposure
20/30
HR & Employment Law Compliance
18/40
Shadow AI & Tool Usage Risk
8/20
AI Guardrails & Oversight Controls
9/25
Third-Party & Vendor Risk
6/15
Employee Awareness & AI Literacy
6/20
Incident Response & Accountability
9/15
What's Assessed
9 Compliance Domains. 44 Questions.
Every question is mapped to real regulatory exposure — not generic best practices.
✓

AI Governance & Policy

AI use policy, governance ownership, tool inventory, risk classification

✓

Data Privacy & Security

PII handling, DPIAs, vendor data agreements, DLP controls

✓

HR & Employment Law

AI in hiring, bias audits, AEDT disclosures, performance review AI, disparate impact

✓

Shadow AI & Tool Usage

Unapproved AI prevalence, approved catalog, prohibited data types

✓

Guardrails & Oversight

Human-in-the-loop requirements, technical guardrails, output logging, prompt injection

✓

Third-Party & Vendor Risk

Embedded AI in SaaS, vendor transparency, AI liability clauses

✓

Employee Training

AI literacy, risk-specific training, leadership governance education

✓

Incident Response

AI-specific IR plan, prior incidents, regulatory audit readiness

✓

Open-Ended Discovery

5 qualitative questions that surface risks no multiple-choice question can catch

Regulatory Coverage
Built Around the Laws That Actually Apply
Every question maps to one or more active or emerging AI regulations. Know which ones affect you before they come knocking.
NYC Local Law 144Mandatory bias audits & candidate notices for AI hiring tools
Illinois AI Video Interview ActConsent & disclosure for AI video interview analysis
Colorado AI Act (SB 24-205)High-risk AI disclosure and bias audit requirements
EU AI ActRisk-tiered regulation — HR & employment = high-risk category
GDPR / UK GDPR Art. 22Automated decision-making rights and data subject protections
CPRA / California PrivacyEmployee rights over automated profiling and AI decisions
EEOC AI GuidanceAI tools must comply with Title VII, ADA, and ADEA
NIST AI RMFFederal risk management framework for trustworthy AI
NLRAAI-based employee monitoring restrictions on union activity
FCRAAI background screening compliance requirements
Pricing
One Price. Complete Picture.
No subscriptions. No per-user fees. One flat fee gives your organization a full compliance risk snapshot — scored, prioritized, and ready to act on.
Most Popular
$249
Per Assessment
  • ✓ 44-question AI compliance assessment
  • ✓ Scored report across 9 domains (out of 190)
  • ✓ Overall Exposure Band (Critical → Minimal)
  • ✓ Section-by-section gap analysis
  • ✓ Prioritized remediation guide
  • ✓ Regulatory framework mapping
  • ✓ Invite unlimited team members
  • ✓ Export results to CSV
  • ✓ Retake anytime to measure progress
Start Your Audit Now →
Takes 20–30 minutes to complete. Results available immediately.
This assessment does not constitute legal advice.
FAQ
Common Questions
Who should take this audit?
HR Directors, Compliance Officers, CISOs, COOs, and Legal Counsel. The assessment is designed for organizational leadership — not individual contributors. Ideally completed collaboratively across HR, IT, and Legal.
How long does it take?
Most organizations complete it in 20–30 minutes. The open-ended questions at the end are optional but often surface the most valuable insights.
What do I get when I'm done?
An immediate scored report showing your overall Exposure Band, a section-by-section breakdown, and a prioritized remediation guide with specific next steps for every gap identified.
Is my data private?
Yes. All audit responses are isolated to your company account. Nothing is shared with other organizations or used to train any AI model.
Does this replace legal counsel?
No. This assessment identifies risk areas and maps them to regulatory frameworks — it does not constitute legal advice. We recommend engaging qualified legal counsel for jurisdiction-specific guidance based on your results.
Can I retake the audit?
Yes. You can retake the audit at any time to measure progress as you implement improvements. Your audit history is saved so you can track your score over time.

Your AI Risk Doesn't Wait.
Neither Should You.

Get a clear, scored picture of your organization's AI compliance exposure in under 30 minutes.

Start Your Audit — $249 →
Already have an account? Sign in →