← All products

PSYCHFLO · ENTERPRISE INTELLIGENCE

AI Governance & Compliance Intelligence

Review AI accountability, oversight, vendor governance and evidence across your organisation.

Explore your edition Pay by card

9 industry editions10 controls per edition30 / 60 / 90 day action plan

CHOOSE YOUR INDUSTRY

Make the review relevant.

Industry edition

customer data governancevendor oversightoperational change

Framework context: NIST AI RMF · ISO/IEC 42001. References describe conceptual alignment; check applicability and exact requirements with qualified specialists.

Your licensed workspace.

Review title

Licensed access tokenHeld only in this page’s memory. Keep it securely for future access.

ASSESS WHAT YOU CAN EVIDENCE

A clear starting point.

Browse the controls freely. Scoring, saved reviews, downloads and exercises require a licence for your selected product and industry. Do not enter personal records, secrets or confidential evidence.

General Business0 / 10 controls answered

Accountability and evidence for AI system inventory

Is there a documented, approved and periodically reviewed process for AI system inventory, with accountable owners and evidence of operation?

Evidence to collect: approved policy or procedure; named control owner; latest operating record; review date and exceptions.

NIST AI RMF / ISO 31000 (conceptual alignment)

Accountability and evidence for risk and impact assessment

Is there a documented, approved and periodically reviewed process for risk and impact assessment, with accountable owners and evidence of operation?

Evidence to collect: approved policy or procedure; named control owner; latest operating record; review date and exceptions.

NIST AI RMF / ISO 31000 (conceptual alignment)

Accountability and evidence for human oversight

Is there a documented, approved and periodically reviewed process for human oversight, with accountable owners and evidence of operation?

Evidence to collect: approved policy or procedure; named control owner; latest operating record; review date and exceptions.

NIST AI RMF / ISO 31000 (conceptual alignment)

Accountability and evidence for vendor due diligence

Is there a documented, approved and periodically reviewed process for vendor due diligence, with accountable owners and evidence of operation?

Evidence to collect: approved policy or procedure; named control owner; latest operating record; review date and exceptions.

NIST AI RMF / ISO 31000 (conceptual alignment)

Accountability and evidence for model monitoring

Is there a documented, approved and periodically reviewed process for model monitoring, with accountable owners and evidence of operation?

Evidence to collect: approved policy or procedure; named control owner; latest operating record; review date and exceptions.

NIST AI RMF / ISO 31000 (conceptual alignment)

Accountability and evidence for incident response

Is there a documented, approved and periodically reviewed process for incident response, with accountable owners and evidence of operation?

Evidence to collect: approved policy or procedure; named control owner; latest operating record; review date and exceptions.

NIST AI RMF / ISO 31000 (conceptual alignment)

Accountability and evidence for regulatory applicability

Is there a documented, approved and periodically reviewed process for regulatory applicability, with accountable owners and evidence of operation?

Evidence to collect: approved policy or procedure; named control owner; latest operating record; review date and exceptions.

NIST AI RMF / ISO 31000 (conceptual alignment)

Customer Data Governance

For General Business, how are risks related to customer data governance identified, assessed, documented, tested and escalated?

Evidence to collect: industry-specific risk assessment; test results or sampled cases; management approval; incident or exception log.

NIST AI RMF; ISO/IEC 42001 (applicability must be verified)

Vendor Oversight

For General Business, how are risks related to vendor oversight identified, assessed, documented, tested and escalated?

Evidence to collect: industry-specific risk assessment; test results or sampled cases; management approval; incident or exception log.

NIST AI RMF; ISO/IEC 42001 (applicability must be verified)

Operational Change

For General Business, how are risks related to operational change identified, assessed, documented, tested and escalated?

Evidence to collect: industry-specific risk assessment; test results or sampled cases; management approval; incident or exception log.

NIST AI RMF; ISO/IEC 42001 (applicability must be verified)

INDUSTRY TABLETOP

Practise the response.

Fictional educational scenarios for team discussion. Exercise results are not part of the maturity score and remain in this page.

Working assessments and starter documents require organisation-specific tailoring, evidence and qualified review. Optional AI advice is not enabled in this workspace.