AI usage & data — risk check — Clarity by BRAINYTECH

Usage

Which AI tools are used, tested or suspected? *

Indicative list, without sensitive data.

How broad are the user populations? *

Very limitedA few people or isolated tests.LimitedA small team or occasional use.DiffuseSeveral teams or decentralized uses.BroadMany users or business areas involved.Very broad / uncontrolledMassive, unknown or uncontrolled usage.

Required field

What level of data may be entered into these tools? *

No internal dataTests use public, fictitious or generic data.Simple internal dataLow-sensitivity internal information.Internal or client dataData to protect, but not maximally critical.Confidential dataClient, HR, contracts, finance, strategy or sensitive code.Highly sensitive dataRegulated data, secrets, security or critical information.

Required field

Have errors, leaks, inappropriate uses or incidents already been observed? *

No known incidentTo confirm: no signal does not prove no usage.Concerns or minor incidentsCases exist but are not consolidated.Significant incidentsConcrete consequences require rapid action.

Required field

Governance

Is there a clear AI usage policy? *

NoNo reliable or formalized element.In progress / partialSome elements exist, but they remain incomplete or poorly shared.YesThe topic is clearly covered and known by the relevant people.

Required field

Is there a registry of AI tools and use cases? *

NoNo reliable or formalized element.In progress / partialSome elements exist, but they remain incomplete or poorly shared.YesThe topic is clearly covered and known by the relevant people.

Required field

Are AI outputs reviewed before important use? *

No review plannedOutput would be used as-is.Occasional reviewReview exists, but depends on individuals.Review for sensitive casesImportant cases are reviewed, without exhaustive rules.Formalized reviewReview responsibilities and criteria are known.Systematic and tracked reviewCritical outputs are reviewed, validated and traceable.

Required field

Are confidentiality rules known by teams? *

UnknownTeams do not know which data to avoid.Poorly knownRules are mentioned but not very operational.Partly knownSome guidance exists for frequent cases.KnownMain rules are shared.Known and appliedRules are understood, applied and reminded.

Required field

Have users received useful AI literacy training? *

No literacyUsers have not received useful guidance.Informal awarenessSome messages or discussions, without a common frame.Initial guidanceRules or workshops exist for part of the teams.Targeted literacyExposed populations received adapted guidance.Structured programLiteracy is tracked, updated and connected to usage rules.

Required field

Is there an approval process for new tools? *

No processAnyone can test or add a tool without decision control.Case by caseRequests are sometimes escalated, without stable rule.Partial processA process exists, but is not systematic.Clear processNew tools or uses are submitted for validation.Clear and tracked processDocumented validation with IT, DPO/CISO or business teams when relevant.

Required field

Are IT, DPO/CISO, HR and business teams involved? *

Not involvedIT, DPO/CISO, HR or business teams are not aligned.Low involvementSome discussions, without coordination.Partial involvementSome actors are involved, but not all.Structured involvementKey actors are involved in decisions.Collective governanceRoles, decisions and responsibilities are shared.

Required field

Choose what happens next

You can generate the diagnostic anonymously. Contact details are only retained if you request email delivery or a conversation with BRAINYTECH.

Name

Organization

Role

Phone

Source

I would like to receive the link to this summary by email.

This authorization is limited to delivery and does not authorize commercial follow-up.

I would like BRAINYTECH to contact me about this diagnostic.

If you request delivery or contact, the contact details you provide are used only for that purpose. Privacy (2026-09-10)

This diagnostic is indicative. It does not replace a full audit. It is used to identify a first orientation and whether deeper scoping is useful.