Free · The one-page record
Where does our data go when AI is involved? Answer it on one page.
Buyers, auditors and partners have started asking the same four things: which AI tools touch our data, where each one runs, who approves a change, and what record we keep. This sheet answers all four in plain words. Fill it in, print it, sign the review line, and hand out a dated copy.
Start from
AI tools that touch our data.
Where each one runs.
Who approves a change.
What record we keep, and where.
The one-page record
Where AI touches our data.
The one-page record a buyer, auditor or partner can read in two minutes.
1. AI tools that touch our data.
| Tool | What it does for us | What data it sees |
|---|---|---|
2. Where each one runs.
| Tool | Country or region | Hosted by |
|---|---|---|
3. Who approves a change.
| Change | Who approves it | How we would know it happened |
|---|---|---|
4. What record we keep, and where.
| What is recorded | Where it is kept | Kept for |
|---|---|---|
If the honest answer to any line is "we do not know", that is the line to fix first. Keep the signed copy; hand out a dated copy.
Template from HANDVANTAGE, secvantages.com. Free to copy and use.
What a blank line means.
A blank line is not a failure. It is the first thing to find out. Most businesses can fill section 1 from memory and section 2 from a vendor's settings page. Sections 3 and 4 are usually where the honest "we do not know" sits, and they are the two an auditor reads first.
If sections 3 and 4 are mostly blank.
The free AI security assessment walks through the controls behind those two sections and gives you a scored report with the gaps named. No call needed to see the result.
Take the free assessment