FreeNo sign-up · Anonymous · Hosted in France

Put AI in order in your organisation, without the jargon.

Answer targeted questions about how you really use artificial intelligence. Get a maturity score, your priority alerts and a tailored guide based on the Cloud Security Alliance AI Controls Matrix, the EU AI Act and the FinOps Framework.

15 minutes · no sign-up · your answers stay anonymous

express assessment
15 min
security · compliance · finance · people
4 pillars
ready-to-use templates
31
Overall maturityDeveloping

36 / 100

  • Security34
  • Compliance42
  • Finance25
  • People41
High alertCV screening without human oversight

Based on

  • AI Controls Matrix · CSA
  • Regulation (EU) 2024/1689
  • ISO/IEC 42001
  • FinOps Framework
  • SecNumCloud · ANSSI
  • GDPR · CNIL

The 4 pillars

Complete governance, not just security.

Security & trust

The 11 AI Controls Matrix controls that fall to you, and the questions to ask your suppliers.

  • AI acceptable use
  • AI inventory
  • Data protection in AI use
  • Pre-deployment impact assessment
  • Human oversight
  • Bias and fairness
  • Explainability and transparency
  • Governance and accountability
  • AI literacy and training
  • AI supplier requirements
  • Identity, access and endpoints
  • Logging and monitoring of AI use
  • Guardrails and AI application security
  • Autonomous AI agents
  • AI incidents and resilience
  • Open models and in-house development

Regulatory compliance

AI Act (prohibited practices, high risk, transparency), GDPR, sector obligations, evidence.

6 themes

AI cost management (FinOps)

Spend visibility, budget, value and unit cost, optimisation, purchasing governance.

5 themes

Responsible use and people

Social dialogue, jobs, content quality, public principles, environmental footprint.

5 themes

Where do you stand? Answer 10 to 30 questions, get your guide today.

How it works

A quarter of an hour. A guide written for you.

  1. Your profile

    Twelve questions: size, sector, uses, data, decisions about people. Two minutes.

  2. The assessment

    10 to 30 targeted questions, one per screen, with four answer levels. Never yes/no.

  3. Your guide

    Score, alerts, a 30, 90 and 365-day action plan, and the documents to carry it out.

Why trust us

An international framework, a sovereign delivery.

The content comes from the Cloud Security Alliance AI Controls Matrix (247 controls), the EU AI Act and the FinOps Framework. The service is hosted in France by a French provider, with no language model and without sending your answers to anyone.

247
AICM controls analysed
and turned into 30 questions
11
controls that fall to you
identified in the framework
31
document templates
policy, register, contracts…
0
data outside the EU
no tracker, no language model

What you get

A guide, not a list of tips.

  • A score and a maturity map

    By pillar and by theme, with the three weakest points of each.

  • Your priority alerts

    What exposes you right now: high-risk use, data without rules, obligations already in force.

  • A dated action plan

    30, 90 and 365 days, with the effort and skills each action requires.

  • The documents to act

    Policy, register, supplier questionnaire, clauses, assessment grid… pre-filled with your name.

Your first 5 actionsFull plan: 34 actions
  • D+30Write and circulate an AI acceptable use policyIn-house · a few hours
  • D+30Create the AI use registerIn-house · a few hours
  • D+30Define who approves AI-assisted decisionsIn-house · a few hours
  • D+90Deployer compliance plan (AI Act, Art. 26)Expert support advised
  • D+90AI clauses in supplier contractsExpert support advised
High alertHigh-risk AI Act use without formal human oversight.Deadline: 2 December 2027
Attached to the guide9 pre-filled templatesDOCX and XLSX · in your name
Example result for a B2B services SME

FAQ

The questions people ask us before starting.

Is it really free? What's the catch?

Yes. The assessment and the guide are free and complete. We make our living from consulting engagements that some organisations entrust to us afterwards; the guide points out, without pushing, the actions where expert support saves time. You remain free to choose.

What happens to my answers?

The assessment is anonymous: no email address or name is required to answer. Your answers are hosted in France, never shared with any third party and never used by any language model. An unfinished assessment is deleted after 30 days.

Do I need to be an expert to answer?

No. The questions use business vocabulary, not framework jargon, and each one comes with an explanation. If you don't know, answer "I don't know": that is useful information in itself.

Is this legal advice?

No. The assessment and the guide help you get organised and set priorities; they do not replace a lawyer's analysis, especially for AI Act and GDPR obligations.

Fifteen minutes to know where you stand.

Free, anonymous, no sign-up. The guide arrives by email, with the documents to act on it.

15 minutes · no sign-up · hosted in France