extrasphere.AI Governance, put to work.
Menu

Kit instructions, fixes and walkthroughs in one place.

Learn how to open your kit, save and reload your work, import records and export reports. Search for a problem or jump straight to a help topic.

Get a new download link

Your first few minutes

  1. Extract the folder

    Unzip the whole download. Open START-HERE.html from the extracted folder in a current desktop version of Chrome, Edge, Safari or Firefox.

  2. Add one real entry

    Choose Guided setup, enter your company, and start with one task. The fictional example shows what a filled-in kit looks like.

  3. Choose where your work lives

    Click Save once and choose a file, for example in your company documents folder. The status line confirms when changes reach that file. Nothing is saved to Documents or Desktop on its own, and nothing is stored online.

Coming back later? Open the kit and click Open to choose your work file. When Save downloads a work file instead, confirm that the download completed and keep the new file with your documents.

Buying from outside the US

Prices are in US dollars. Your card provider converts the amount to your currency.

See the refund policy and purchase terms before you buy.

Something not working?

Checkout is asking me to sign in to Link

Link is Stripe’s optional saved-payment service and may ask you to verify your identity. If you prefer, choose the card payment option shown in checkout. Extrasphere does not require a Link account or a bank connection to use the kits.

I can’t find my download

Check spam and the email address used at checkout. You can request a new download link using your purchase address.

The dashboard looks blank or broken

Extract the entire ZIP before opening START-HERE.html. If it still does not work, run the computer check or contact support with the exact error.

I can’t save or open my work

Your work file is wherever you chose when you first clicked Save; the status line next to Save names it and shows the last successful save. Saving means a write is in progress; Saved confirms it finished. If saving fails, keep the kit open and download a backup before reconnecting the work file. If Save requested a download, check your browser’s downloads and keep the newest completed work file. Click Open to bring a work file back. HTML reports, Word documents and spreadsheet exports cannot restore a dashboard.

If downloads or file selection are blocked, use the company-computer guidance below.

The report won’t print

Choose View report → Download report (HTML). Open that file in your desktop browser, then choose Print or Save PDF.

Work computers and troubleshooting

You’re on a phone or tablet. Open this check on the computer you’ll use the kit on.

Email me this page

ShowHide this topic

In current kits, open Settings → This computer. These checks use a small diagnostic file to test downloading, opening and printing. They do not import or replace your work, change your selected save file, or approve the kit’s records or outputs. Nothing is sent anywhere.

If the kit cannot start, follow the opening screen’s troubleshooting instructions and IT request. You can also download the separate computer check below and open it locally in the browser you’ll use for the kit. It checks scripts, browser storage, downloads, opening files, pop-up windows and printing.

Older kit folders may include CHECK-YOUR-COMPUTER.html; open that adjacent file only if it is present. Current kits keep their diagnostics inside Settings.

Download the computer check

System requirements

Computer
A Windows 10 or 11 PC, or a Mac with a current macOS.
Browser
A current version of Chrome, Edge, Safari or Firefox.
Folder
The ZIP extracted to a folder on the computer, such as Documents. Not opened from inside the ZIP, an email or a synced folder.
Size
A kit ZIP is about 1 to 5 MB; bundles and the Practitioner master are larger. Allow 40 MB once extracted.
Screen
A desktop browser window on a laptop or desktop screen.

Not supported: phones, tablets (iPads included) and Chromebooks. Virtual desktops (Citrix and similar) work only if the browser keeps its saved data between sessions, so save a work file before you sign out.

Downloaded on Windows? Before you extract it, right-click the ZIP, choose Properties, tick Unblock and press OK, so Windows stops treating the files inside as blocked internet downloads. On a Mac, double-click the ZIP to extract it; if macOS warns that a file came from the internet, choose Open, or ask IT to clear the quarantine flag on the kit folder.

What the kit needs from a work computer · IT checklist (plain text)

If a check shows a problem

Scripts

This browser is blocking scripts, so the kit can’t run. On a work computer, IT may have blocked scripts.

Open this file in a different browser (Chrome, Edge, Safari or Firefox).

Saving in the browser

This browser cannot keep a draft between visits. Private windows or company policies may block browser storage.

Use a normal window in a browser your company approves. Save a work file before closing. If storage remains blocked, ask IT for an approved way to run the kit; do not change security settings yourself.

Downloading files

Your browser didn’t save the test file, so you won’t be able to save your work or exports. Downloads may be blocked, or saved somewhere you didn’t expect.

  • Chrome: Check the download icon at the top right. If it was blocked, choose Keep. Settings → Downloads shows where files go.
  • Edge: Check the Downloads icon at the top right. If it was blocked, choose Keep. Settings → Downloads shows where files go.
  • Safari: Click the Downloads arrow in the toolbar. Safari → Settings → General → File download location shows where files go.
  • Firefox: Click the Downloads arrow in the toolbar. Settings → General → Downloads shows where files go.
Opening files

The file you chose wasn’t the test file, or the browser couldn’t open it.

Press Choose file again and pick extrasphere-test.json from your Downloads folder. If you can’t find it, redo the Downloading files check first.

Pop-up windows

This browser can’t show the pop-up windows the kit uses. This usually means the browser is out of date.

Update your browser to the latest version and restart it, or try Chrome, Edge, Safari or Firefox.

Printing and PDF

Print preview didn’t open, so saving reports as PDF may not work.

  • Chrome: Press Ctrl+P (Windows) or ⌘P (Mac). Choose Save as PDF as the destination.
  • Edge: Press Ctrl+P (Windows) or ⌘P (Mac). Choose Save as PDF as the printer.
  • Safari: Choose File → Export as PDF, or press ⌘P and choose PDF at the bottom.
  • Firefox: Press Ctrl+P (Windows) or ⌘P (Mac) and choose Save to PDF.

On a work computer?

Work-managed laptops often block a few things the kit needs. Find yours below.

The kit download or ZIP won’t open

How to spot it: the download is marked “blocked”, or the ZIP won’t unzip.

Try: choose Keep in the browser’s download list. Right-click the ZIP and choose Extract All (Windows) or double-click it (Mac). If that’s blocked, ask IT.

Files on your computer won’t open in the browser

How to spot it: the page is blank, says “blocked by your organization”, or the Scripts check fails.

Try: open the file in another browser your company approves. If none work, ask IT to allow local HTML files.

Your work disappears between visits

How to spot it: the Saving in the browser check fails, or saved progress is gone the next day.

Try: use a normal (not private) window. Click Save in the kit so your work lives in a file, because some companies clear browser data when you sign out.

The kit folder is in a synced or temporary folder

How to spot it: files open from inside the ZIP, OneDrive, or a Temp folder, or links between pages break.

Try: unzip the whole folder into Documents, then open START-HERE.html from there.

Browser settings are managed by your company

How to spot it: the settings show “Managed by your organization”.

Try: you can’t change these yourself. Send IT the note below.

What the kit needs from a work computer

Most work laptops run the kit without any change. Some block one of the steps below.

What the kit needsIn plain termsIf it is blocked
What the kit needsOpen a local HTML fileIn plain termsDouble-click START-HERE.html from a folderIf it is blockedAsk IT to allow local HTML files in your browser
What the kit needsRun scripts in that fileIn plain termsThe dashboard responds when you typeIf it is blockedAsk IT to allow JavaScript for local files
What the kit needsSave and download filesIn plain termsSave (your work file), Excel and Word exportsIf it is blockedAsk IT to allow saving and downloading .json, .xlsx and .docx files
What the kit needsChoose a file to openIn plain termsOpen (your work file), Import client questionsIf it is blockedAsk IT to allow the file picker
What the kit needsPrintIn plain termsPrint / Save PDF for the reportIf it is blockedUse your normal PDF printer

If IT cannot allow local files at all, ask them to place the extracted folder on an internal web server the team already uses. The kit behaves the same there and still sends nothing outside the company.

Note to send to your IT team

Paste your copied check results where it says [paste results]. Don’t change security settings yourself.

Subject: Request to run a local HTML tool (Extrasphere kit)

Hi [IT contact],

I've purchased an Extrasphere AI governance kit for [team or purpose]. It is a set of HTML files that run entirely in the browser from a local folder. It makes no network connections, installs nothing, and stores data only in the browser and in files I save myself. Vendor details: extrasphere.com/help and extrasphere.com/trust.

On my machine, the following step(s) are blocked: [paste the compatibility check result].

To run the kit, the browser needs to:
1. Open a local .html file from a folder (file:// URLs) in a current desktop version of Chrome, Edge, Safari or Firefox.
2. Run the JavaScript inside that file.
3. Save the kit's work file (.json) where I choose, and download its reports or readable exports in the formats offered by that kit.
4. Let me choose a file to open (the standard file picker) to open a work file or import a CSV.
5. Print to PDF.

Could you allow these for my account, or tell me the approved way to run a local HTML tool here? I'm not asking for any security setting to be turned off for others.

Thanks,
[Name]

Import Excel or CSV records

ShowHide this topic

The mapping wizard is included free. Import AI inventory and actions in the AI Governance Toolkit, AI Policy & Rollout Kit and Shadow AI Risk Kit, actions and past questions and answers in the AI Questionnaire Response Kit, or actions in the SSPA Section K Readiness Kit. Their industry editions support the same record types. The ISO Evidence Collection kit uses its separate CSV partner-request importer. The AI Feature Record Kit also imports feature, change, evidence and action records.

For the AI Questionnaire Response Kit: Import brings in action records (follow-ups, owners, dates) or past questions and answers. Past answers arrive as unreviewed drafts; reuse one through the response register, where the usual review applies.

Two ways to start

Manual import reads your existing spreadsheet directly.

Manual import works without any AI tool. Your file is read on your computer and nothing is sent anywhere.

For help reformatting it, choose Prepare a file with your AI: select the record type, click Copy import prompt, then paste it into your work-approved AI with the spreadsheet or table. Bring back the prepared CSV using Use pasted CSV or the file picker. Both routes continue through column mapping and review.

The prompt uses plain text and CSV, without a provider-specific integration. Your assistant must support reading the supplied spreadsheet or pasted table and returning CSV; capabilities and company permissions vary. The dashboard sends nothing to AI. Compare the prepared records with your original spreadsheet and confirm that check before importing. AI checks formatting and consistency; it does not independently verify the facts. Source details for this route refer to the AI-prepared file.

Watch an import

  1. Choose your records

    In the dashboard, select Import records and choose AI inventory or actions where available. Select an Excel .xlsx or .csv file, then choose its worksheet and the row containing column headings.

  2. Match and review

    Confirm which spreadsheet column belongs in each dashboard field. Leave unwanted columns as Do not import. Check Values to add, resolve flagged dates or choices, and confirm any action links to inventory records. Duplicate rows are skipped; you choose which other valid rows to add. An approval or completion in your file arrives as “Imported: Approved, please confirm” (or the decision your file records) and counts as undecided, not as an active approval or a completed action, until you choose Confirm on the record. Empty rows are skipped and counted in the summary.

  3. Add, check and save

    Confirm the selected records, then choose Open populated dashboard to review them in their register. View report includes the imported records. Your work file keeps records and import history in a portable work file; use Open to restore it later.

Import files are read locally in your browser. If you choose AI preparation, you share the spreadsheet with your approved assistant yourself. Importing is a reviewed copy into the dashboard; it does not synchronize with your spreadsheet. Save your current work before importing.

My spreadsheet won’t open

Use .xlsx or .csv, up to 10 MB, with no more than 2,000 records and 100 columns per sheet. In Excel, save an older .xls file as .xlsx or export a CSV copy; changing the filename extension is not enough. Use an unencrypted copy of a password-protected workbook if company policy permits it. Formula values need to be saved in the workbook; the importer does not run formulas or macros. If your work computer blocks file selection, follow the managed-browser guidance.

A date needs confirmation or looks wrong

On Review records, choose Date order in this file when asked: day/month/year or month/day/year. Check the resulting dates under Values to add before adding records. Correct invalid dates in the source file and import it again, or use unambiguous YYYY-MM-DD dates. Rows with unresolved errors cannot be added.

Duplicates were skipped, or I can’t undo an import

Duplicates are skipped to avoid adding the same record again. Importing does not update or merge existing records; edit the existing dashboard record when a value changes. Import history can undo a whole unchanged batch. If a batch record has since been edited or linked, undo is blocked to protect that later work. Keep the records and review them, or restore a work file saved before the import after saving your current draft. Restoring replaces the current workspace, including later work.

Export formats: SSPA and ISO evidence index

ShowHide this topic

The columns each export writes, in order, so a partner or reviewer can map them into their own system. Company is the company name from the kit’s Settings, and the date and time are when you exported. The kits write these files on your computer; nothing is uploaded.

SSPA Section K Readiness Kit: Evidence index (Excel)

File: Company-SSPA-Section-K-workbook-YYYY-MM-DD-HHMM.xlsx, sheet Evidence. From Settings, then Download Excel. The workbook’s other sheets hold the kit’s other sections.

  1. Artifact The kind of source, one row for each of the kit’s 14 source types.
  2. Exists Yes when the source exists.
  3. Owned Yes when someone is responsible for keeping it.
  4. Current Yes when it is up to date.
  5. Status Ready when all three are Yes, In progress when some are, Not started when none are.
  6. Files collected How many files the evidence folder holds for the row, then their names.
  7. Owner name Who keeps the source.
  8. Last reviewed When the source was last reviewed.
  9. Location Where the source is kept.
  10. Notes Your notes for the row.
SSPA Section K Readiness Kit: Handover (CSV)

File: Company-SSPA-Section-K-handover-YYYY-MM-DD-HHMM.csv. From Handover tab, then Export CSV. Download Excel writes the same columns to its Handover sheet with one more at the end, Archived (Yes or No); the CSV has no Archived column and includes archived rows.

  1. Handover ID Your reference for the handover, such as H-01.
  2. Recipient role Who receives it, by role.
  3. Scope and version What it covers, by requirement number, and its version.
  4. Evidence IDs included The evidence references it contains, such as E-02; E-04.
  5. Sharing date When it was shared.
  6. Access expiry or restriction When access ends, or how it is limited.
  7. Open questions Questions still waiting for an answer.
  8. Response owner Who answers them.
  9. Next action What happens next.
ISO 42001 Evidence Collection Kit: Evidence index and handover (CSV)

File: Company-Evidence-Handover-YYYY-MM-DD.csv. From Handover, then Export CSV. One row for each request and linked source.

  1. Partner reference Your partner’s reference number for the request, such as REQ-001.
  2. Request The request as it came in your partner’s list.
  3. Collection status Needs work, Waiting for someone, Ready to hand over or Handed over.
  4. Request owner Who collects for the request.
  5. Due date When your partner needs it.
  6. Evidence ID The linked source’s ID, such as E-01. A request with two linked sources gets two rows.
  7. Evidence title The source’s name.
  8. Source location Where the source is kept.
  9. Source owner Who keeps the source.
  10. Date/version The source’s date or version.
  11. Coverage What part of the request the source covers.
  12. Sharing notes Anything to know before sharing it.
  13. Outstanding checks What is still missing. While anything is, the evidence columns stay blank.

Fictional samples with these columns, using reference numbers only: SSPA Evidence index and handover (Excel) · Handover (CSV); ISO Evidence handover (CSV) · Same columns (Excel).

AI Feature Record Kit (Software edition)

ShowHide this topic

One record per customer-facing AI feature. A record moves through five states, and the kit only lets it move forward when the facts behind it are recorded.

Draft
The feature is recorded but not yet checked.
Verified
Every required field is filled in and none reads Unverified.
Customer-ready
Verified, with the last reviewed date and reviewer recorded. Only Customer-ready and Published features can go into the disclosure.
Published
The reviewed disclosure has gone out through your normal channel, with the date and channel recorded.
Held
Waiting on a fact, with the reason recorded. A held feature stays out of the disclosure.

Required before Verified

  • Provider and model as recorded
  • Listed as a sub-processor
  • Data sent to the model
  • Provider retention of prompts and outputs
  • Provider retention status
  • Provider uses customer content to train or improve models
  • Human oversight
  • Owner
  • Reviewer
  • Evidence references

Provider retention and training can be Not applicable for a self-hosted or internal model. Customer-ready also needs Last reviewed on and Last reviewed by.

When a feature may involve a decision about a person or business

This feature may involve a decision about a person or business. Record a specialist review (name or role, date) before marking it Customer-ready. The kit does not decide whether any rule applies.

Your team sets this answer; the kit never suggests it. Unsure works like Yes. The field is Specialist review recorded (name or role, date).

Changes and re-checks

Log each change to a feature in the Change log. A change marked Triggers re-check: Yes moves a Customer-ready or Published feature back to Verified and shows Re-check due until the re-check is recorded. Changes worth marking: a new model or provider, a change in which customer data reaches the model, or a change to a retention or training setting.

Disclosure

The disclosure, titled AI in our product, shows Last reviewed (date and reviewer role) and a Limits and open items section. That section stays on the page while any included feature has an open item.

Import columns

Feature-Register-Import.csv in your download has every column, with the same names as the dashboard. Common header variations are matched for you; review the matches before importing. A blank value reads as Unverified. If an imported record claims a state its facts do not support, the kit moves it back and says why. The change log and the evidence list import the same way.

Move records to another kit

  • Package for the AI Questionnaire Response Kit: for each Customer-ready or Published feature, the evidence entries and answer rows for common customer questions. Each row keeps its evidence reference, checked date and limits, and arrives for your review, never as approved.
  • Package for the ISO 42001 Evidence Collection Kit: the feature register and its evidence, as evidence sources you link to partner requests yourself. No standard clauses or request list are added.

Importing the same package again adds nothing twice.

See the AI Feature Record Kit · Writing an AI feature disclosure from your records

More about your kit

Time and preparation

How quickly can I get started?

For the AI Governance Toolkit: About 15 to 30 minutes to a first useful entry, and 2 to 3 hours for a full setup. Each kit page gives that kit’s own planning estimate. These are estimates, not guarantees.

How long does completing a kit take?

Plan to work across several sessions. Gathering evidence, coordinating owners and obtaining approvals may extend the work over days or weeks. Start with one task and keep unresolved decisions visible; filling every field is not the same as implementing the work.

What should I prepare?

Bring one workflow or request, its accountable owner, relevant policies, vendor details and evidence locations. For questionnaires, bring the buyer’s questions; for ISO evidence collection, bring your partner’s request list; for SSPA, bring the requirements issued for your engagement.

Files, team use and updates

What will I produce?

A working dashboard, a portable work file and a report reflecting your reviewed entries. Excel is an optional readable export. Evidence references point to documents in your approved repository; those documents are not attached or verified by the dashboard.

How do I save and resume?

Your work lives in one file you choose. Click Save once and pick where the file lives, for example your company documents folder; the status line confirms when changes reach that file. Click Open to bring a work file back on another computer; opening replaces the current work after confirmation. When Save downloads a work file instead, confirm that the download completed before closing. HTML, Word and Excel are not restore files. Every working kit uses its own dashboard and Guided setup. Reports come from the entries you review. Supported inventory and action registers also accept Excel or CSV through Import records. Use the work file to restore the complete workspace; spreadsheets do not synchronize with it.

Still from saving, then picking up where you left off, fictional example company
Saving, then picking up where you left offFrom the AI Governance Toolkit walkthrough. Fictional example company.

Can I bring my existing Excel or CSV records?

The included Excel (.xlsx) and CSV wizard supports AI inventory and actions in the Governance Toolkit, Policy and Shadow AI kits, and actions in the Questionnaire and SSPA kits. The ISO Evidence Collection kit has its separate CSV partner-request importer. Use Manual import, or choose Prepare a file with your AI and Copy import prompt to prepare your spreadsheet in work-approved AI. Paste the returned CSV or choose its file, confirm column matches and review duplicates before adding records. Compare AI-prepared data with your original spreadsheet; source details retain the prepared values, not the original workbook. Files are read locally in your browser. Original source values remain available for review; importing does not grant approval. Import history can undo a whole unchanged batch. Later edits or links to its records block undo to preserve subsequent work. Your work file keeps records and import history. This is a reviewed import, not automatic synchronization.

How can my team share and work with the kit?

The purchasing company can use and adapt the kit internally. Keep one coordinator responsible for the current work file and share reviewed reports or dated exports through approved company locations. Each person’s dashboard copy is separate: there are no team accounts, simultaneous shared editing, automatic sync or automatic merging. For shared access or a separately scoped team version, email service@extrasphere.com to discuss your requirements. This is an inquiry route, not a currently included multi-user feature.

Can I use one kit for several companies?

Each kit is licensed to one company. Consultants buying for their own operations can use a standard kit. Delivering licensed copies to clients requires the Practitioner License or a separate license for each client company. See the published terms for company scope.

Do I get updates?

Updates are included for 12 months from purchase. Use your delivery email or Get a new download link for eligible updates. Keep a backup before loading your work into a newer version; check its compatibility notes.

Using an AI assistant

Is this self-service, and do I need an AI subscription?

Yes. Complete the dashboard yourself or use the included Draft with AI interview and advanced file workflow. Copy a section-specific prompt into your approved assistant and answer by voice or text. Bring its work file back to preview and apply selected fields. Your AI service and any required subscription are separate; you can always work without AI. Consulting and record review are scoped separately.

Can my AI agent work with existing files?

Yes, through the included request-and-review workflow. In Draft with AI, expand Advanced: work with your files, prepare a request and give it with the copied instructions to your approved agent. Select the evidence separately in that tool. Return the proposed response file to Draft with AI for review. This is file exchange, not a built-in connector or background sync. Local files may be processed by your AI provider; obtain the necessary company permission. The dashboard never automatically marks evidence verified or controls complete.

Which AI tools and voice features can I use?

The prompts use plain text and a documented response format, for use in your own work-approved AI assistant. Voice and file features depend on that assistant, its plan and your organization settings. Use an agent with permitted file access for the advanced workflow. Start with text if voice is unavailable; switch back to text for the response file. The dashboard has no links to AI services: you copy the prompt into your assistant yourself, and nothing is sent or started for you. Universal tool compatibility is not guaranteed.

We already use several AI tools. Where should we start?

Start with one real use or request in this kit. Record its purpose, owner, data involved, affected people and the next open action. Draft with AI can interview you about those facts. The kit helps organize tools already in use; it does not discover accounts automatically, monitor staff or assess vendor settings on its own.

What if an AI draft cannot be imported?

Use Draft with AI → Paste AI draft or its response-file picker, not Open. The draft must match the request from this dashboard and contain allowed fields. If entries changed while the assistant was working, prepare a fresh request to protect your newer work. Ask the assistant to correct any reported format error, or enter the reviewed values manually. Your work file keeps your request and review history; keep that work file private.

Scope and support

Does completing the dashboard establish compliance?

No. Completed fields and review marks do not establish implementation, certification or independent assurance. Your team must adapt the records, verify the evidence, approve decisions and maintain the actual practices. These are independent preparation aids.

What support is included?

Purchase and access assistance is included. We reply to purchase inquiries and access problems within 2 business days. Implementation, legal advice and review of your completed records are separate services. See the published refund policy for its terms.

What should I send if something is blocked?

Run the compatibility check, click Copy results, and paste them into the IT request above or into an email to service@extrasphere.com. Include the kit name and version. Please do not send confidential evidence or unredacted work files.

What if the download, dashboard or report does not work?

For a missing email, check spam and your checkout address. Use your delivery email or Get a new download link for access; if it still fails, contact support with the order reference. Extract the entire ZIP before opening START-HERE.html. If report printing fails, download the HTML report and open it in your approved desktop browser.

Kit walkthroughs

ShowHide this topic

Each walkthrough uses a fictional example company. Captions are available.

Free tools

A policy starter, a Shadow AI check, a client questionnaire starter and industry field guides. Each one leads to a kit when you’re ready.

See the free tools

Delivering kits to clients

Standard kits are licensed for one company. The separate Practitioner License includes commercial delivery and defined client allocations. Its terms govern branding, client copies and redistribution.

Still need a hand?

Email the kit name, the file you’re opening and what went wrong. For order issues, include your purchase email and order reference.

We reply to purchase inquiries and access problems within 2 business days. Please don’t send card details, confidential evidence or unredacted work files.

Email kit support

Refund policyPurchase and license terms

VideoFictional example company · Captions on screen