The AI governance knowledge centre.
Framework guides, the vendor playbook, honest comparisons, the regulatory brief library and free tools — one entry point, kept current by the people producing the artefacts.
Two diagnostics you can run today
The same first questions we ask in a scoping call, without the call. Both give you a written result you can put in front of your board.
Security questionnaires, explained
The CAIQ, the SIG, the DDQ and the VSA, and the AI section that now sits inside all of them. What each one is, who sends it, and what a strong answer looks like.
The Cloud Security Alliance's standard questionnaire, built on the Cloud Controls Matrix.
Shared Assessments' heavyweight of third-party risk. Core and Lite, both now carrying AI content.
The catch-all name for the bespoke questionnaires enterprises assemble in-house.
The Vendor Security Alliance's standardised questionnaire, used widely across technology procurement.
Where reviews now stall, and what a buyer expects to be shown.
The answer library
Every question in the CAIQ and SIG Lite AI section, with a model answer, the evidence a buyer expects behind it, and why the weak version fails. Free, no sign-up.
Framework guides
Plain-English guides to the frameworks we take clients through, cited to the source and kept current.
The AI management system standard enterprise buyers now screen for.
High-risk obligations translated into artefacts and controls.
Govern, Map, Measure and Manage, mapped to enterprise controls.
Automated decision-making: lawful basis, DPIA, ROPA and the Article 22 tests.
Alongside your compliance platform
Most clients already run Vanta, Drata, Secureframe or Sprinto. The platform holds the evidence. We produce it, and take you through the audit.
Regulatory briefs
Short, dated briefs on the questions boards and buyers actually ask, each cited to the instrument it interprets.
Insights
Longer pieces on certification, internal audit and buyer assurance, written for the people who have to operationalise it.
See Hael run against one of your own AI systems.
Request a walkthrough, or explore the platform in your own time.