Document the AI tools your team already uses.
Your team is already using AI. Check every tool that's in the mix. This is your AI inventory. Not sure whether a tool counts? Tap "Learn more" below.
Learn more
A tool counts as "AI" if it generates, classifies, transcribes, translates, summarizes, or ranks content on your behalf. Autocomplete in email, "AI insights" tabs in your dashboards, meeting transcription, chat assistants, and image generators all count.
Consumer vs. enterprise editions matter. The consumer / free tier of a tool (ChatGPT free or Plus, Claude.ai, personal Copilot) and its enterprise edition (ChatGPT Enterprise / Team, Claude for Work, Microsoft 365 Copilot, Gemini for Workspace) are different vendor relationships with different risk profiles. Pick the specific edition your team uses so your Vendor Scorecard and Data Governance modules answer correctly.
Add anything missing at the bottom - the inventory is easier to maintain when it's complete on day one.
AI tools already in use
No tools added yet. Add from the common tools below, check one from the palette, or add your own at the bottom.
Common day-one AI tools Reference
The AI tools SMBs most often already have in the mix. Click + Add to drop any into your inventory, or use it as a checklist while you build out the palette below.
Tip: after adding a tool here you can tag its data-sensitivity level down the page.
General-purpose assistants (consumer)
OptionalFree / personal / Plus tiers. Data may be used to train models by default; no DPA. Pick these if your team uses personal accounts.
Enterprise editions of general-purpose assistants
OptionalData excluded from model training by default, DPA available, SSO + admin controls, audit logs. Pick these if your company has signed up as an organization.
Other common workplace AI
OptionalAdd a tool we missed
Your inventory maps to ISO/IEC 42001 Annex A.4 (AI system context) and NIST AI RMF MAP-1.1 (categorize AI systems). Sensitivity tags map to ISO/IEC 42001 Annex A.7 (AI system data) and NIST AI RMF MAP-4. Sanction status maps to ISO/IEC 42001 Annex A.6 (AI system lifecycle) and NIST AI RMF GOVERN-1.4.