AI assessment
Tackle Shadow AI See which AI is in use across your company
From cloud AI services to local AI running on individual computers, we list the AI in use across your company and the data each one can access.
The assessment does not change the configuration of your AI clients.
We do not collect prompts or conversation content.
We only look at connections to AI services. Other browsing history is out of scope.
You receive a report with our findings and the next steps to take.
SaQura is provided by KyotoTech LLC.
What the assessment shows you
See which generative AI services are in use
Generative AI services take minutes to set up, so they often find their way into daily work without approval. We identify the AI services used across your company from your proxy and DNS logs. We only count connections to AI services and report the results without identifying individuals.
We also check for unapproved local AI
We also check for AI models running on your company's computers and servers, including those installed without approval.
Find AI libraries and SDKs
We find the AI libraries and SDKs in your code and configuration and list which of your systems use AI.
Unidentified AI connections listed as “Unclassified”
AI connections we cannot attribute to a specific service are listed as “Unclassified”, and we review them with you.
What AI can access, and with which permissions
We map the systems and data that AI agents and accounts can reach and identify permissions that go beyond what the job requires.
A first step toward AI governance
AI governance starts with knowing which AI is in use. We summarize the current state and the recommended actions in a report that management and auditors can follow.
What we assess
AI usage
Generative AI services, locally running AI models, AI libraries and SDKs, and AI agents, including unapproved ones.
Access rights
The data and systems that AI and accounts can access.
Encryption
How your critical data is encrypted and where the weak points are. We can review this alongside the AI assessment.
What you receive
A report
Our findings in one place, explained in plain language.
Clear priorities
What to tackle first, and why.
How it works
- 1
Contact us
Get in touch through the form.
- 2
Kickoff call
We agree with you in advance on the scope and how we access your systems.
- 3
Assessment
We review AI usage, access rights and encryption without changing the configuration of your AI clients. We do not collect prompts or anything users type.
- 4
Report
We present the results and go through them with you. If you wish, we support you through remediation.
Do you know how AI is used in your company?
We would be glad to hear from you. Just tell us your company name and what you would like to discuss, and we will get back to you.