Vendor exposure
Identify AI vendors and AI-shaped endpoints, then measure concentration and dependency.
- Known AI service taxonomy
- Inference and embedding endpoints
- Recommendation and decision surfaces
AI usage and data movement
Find the AIyour inventory missed.
Detect AI services in observed traffic, then evaluate sensitive data, disclosure, training rights, sovereignty, and decisioning risk.
Product evidence
4 pillarsone AI risk score
Shadow AIobserved in traffic
Evidenceper vendor and flow
Data leakage
Measure which categories of sensitive data reach AI recipients and weight the exposure by sensitivity.
- PII and credentials
- Health and regulated data
- Cross-domain identifier propagation
Disclosure gap
Compare observed AI use with the organization's privacy policy and AI disclosures.
- Undisclosed AI vendors
- Purpose and training-rights context
- Policy-versus-wire evidence
Sovereignty and decisioning
Surface cross-border inference and endpoints that suggest personalization, prediction, or automated decisions.
- Processing locations
- Cross-border vendor count
- Decisioning endpoint evidence
Data Risk Review
See the AI data wake around a company.
Start with one domain and build a living record of the vendors, paths, gaps, and evidence behind the score.
Request an evidence briefing Review slots are scheduled in the order requests are received.