TrustLayer Book a demo
Free / No sign-up / 2 minutes

How exposed are you to shadow AI?

Six questions. Your answers never leave your browser. You get a score, your three biggest gaps, and what to do about them.

Question 1 of 6

Could you list every AI service your staff used last month?

Question 2 of 6

If someone pasted client data into a public AI tool this morning, would you know?

Question 3 of 6

Can you control which AI services people are allowed to reach?

Question 4 of 6

Do you have an approved list of AI tools that staff may use?

Question 5 of 6

Is your AI acceptable-use policy enforced technically, or only written down?

Question 6 of 6

Have staff been told what they must not put into an AI tool?

0
out of 100
 

 

Where your gaps are

Get the full report

Get your score, your answers and the gaps as a PDF, straight away. We will keep your details and follow up to see if you want help closing them.

You can also just save it as a PDF below and give us nothing at all. How we handle your data.

Want the real numbers instead of an estimate?

Get a free AI Health Check → Book a demo

The AI Health Check runs for two weeks and reports the AI services actually in use across your organisation, rather than just what you think.

TrustLayer
Shadow AI Risk Check
Generated
trustlayer.co.uk

Shadow AI exposure report

An indicative self-assessment of how exposed your organisation is to unmanaged AI use.

out of 100

Your answers

QuestionYour answerRating

Priority actions

Suggested next steps

  1. Establish what is actually in use rather than what you believe is in use. A two-week AI Health Check produces a real inventory.
  2. Publish an approved list of AI tools, and make it easy to find.
  3. Enforce that list technically, so policy does not depend on everyone choosing to comply.
  4. Retain the logs. Deployers of high-risk AI systems must keep records for at least six months under the EU AI Act.
This is an indicative self-assessment based on six questions answered by you. It is not an audit and does not constitute legal or compliance advice. Scoring ran entirely in your browser: no answers were transmitted or stored.
TrustLayer · Cybersecurity, the direct way.