How can we help?

Your first few minutes

1. Extract the folder

   Unzip the whole download. Open START-HERE.html from the extracted folder in a current desktop version of Chrome, Edge, Safari or Firefox.

2. Add one real entry

   Choose Guided setup, enter your company, and start with one task. The fictional example shows what a filled-in kit looks like.

3. Save your work file

   Choose Save my work. Keep the downloaded work file somewhere your company keeps documents.

Coming back later? Open your dashboard and use Settings → Load a work file. Save the current draft first if you need to keep it.

Something not working?

Work computers and troubleshooting

Before you open a kit, run the 1-minute computer check in the browser you’ll use for it. It’s CHECK-YOUR-COMPUTER.html in the kit folder. It checks scripts, saving in the browser, downloads, opening files, pop-up windows and printing, and shows a fix for anything that fails. Nothing is sent anywhere.

Download the computer check

If a check shows a problem

On a work computer?

Work-managed laptops often block a few things the kit needs. Find yours below.

Hi, I’m using an Extrasphere kit: HTML files that run in the browser from a local folder. It installs nothing and makes no network connections. Details: extrasphere.com/trust

Blocked on my computer: [paste results]

Could you allow, for my account: opening local .html files and running their scripts, downloads, the file picker, browser storage, and print to PDF? Thanks.

Import Excel or CSV records

The mapping wizard is included free. Import AI inventory and actions in the AI Governance Toolkit, AI Policy & Rollout Kit and Shadow AI Risk Kit, actions and past questions and answers in the AI Questionnaire Response Kit, or actions in the SSPA Section K Readiness Kit. Their industry editions support the same record types. The ISO Evidence Collection kit uses its separate CSV partner-request importer.

For the AI Questionnaire Response Kit: Import brings in action records (follow-ups, owners, dates) or past questions and answers. Past answers arrive as unreviewed drafts; reuse one through the response register, where the usual review applies.

Two ways to start

Manual import reads your existing spreadsheet directly.

Manual import works without any AI tool. Your file is read on your computer and nothing is sent anywhere.

For help reformatting it, choose Prepare a file with your AI: select the record type, click Copy import prompt, then paste it into your work-approved AI with the spreadsheet or table. Bring back the prepared CSV using Use pasted CSV or the file picker. Both routes continue through column mapping and review.

The prompt uses plain text and CSV, without a provider-specific integration. Your assistant must support reading the supplied spreadsheet or pasted table and returning CSV; capabilities and company permissions vary. The dashboard sends nothing to AI. Compare the prepared records with your original spreadsheet and confirm that check before importing. AI checks formatting and consistency; it does not independently verify the facts. Source details for this route refer to the AI-prepared file.

1. Choose your records

   In the dashboard, select Import records and choose AI inventory or actions where available. Select an Excel .xlsx or .csv file, then choose its worksheet and the row containing column headings.

2. Match and review

   Confirm which spreadsheet column belongs in each dashboard field. Leave unwanted columns as Do not import. Check Values to add, resolve flagged dates or choices, and confirm any action links to inventory records. Duplicate rows are skipped; you choose which other valid rows to add. Imported approval or completion claims remain source information for review, not active approvals or completed actions.

3. Add, check and save

   Confirm the selected records, then choose Open populated dashboard to review them in their register. View report includes the imported records. Choose Save my work to keep records and import history in a portable work file; use Settings → Load a work file to restore it later.

Import files are read locally in your browser. If you choose AI preparation, you share the spreadsheet with your approved assistant yourself. Importing is a reviewed copy into the dashboard; it does not synchronize with your spreadsheet. Save your current work before importing.

Export formats: SSPA and ISO evidence index

The columns each export writes, in order, so a partner or reviewer can map them into their own system. Company is the company name from the kit’s Settings, and the date and time are when you exported. The kits write these files on your computer; nothing is uploaded.

Fictional samples with these columns, using reference numbers only: SSPA Evidence index and handover (Excel) · Handover (CSV); ISO Evidence handover (CSV) · Same columns (Excel).

AI Feature Record Kit (Software edition)

One record per customer-facing AI feature. A record moves through five states, and the kit only lets it move forward when the facts behind it are recorded.

Draft

The feature is recorded but not yet checked.

Verified

Every required field is filled in and none reads Unverified.

Customer-ready

Verified, with the last reviewed date and reviewer recorded. Only Customer-ready and Published features can go into the disclosure.

Published

The reviewed disclosure has gone out through your normal channel, with the date and channel recorded.

Held

Waiting on a fact, with the reason recorded. A held feature stays out of the disclosure.

Required before Verified

• Provider and model as recorded
• Listed as a sub-processor
• Data sent to the model
• Provider retention of prompts and outputs
• Provider retention status
• Provider uses customer content to train or improve models
• Human oversight
• Owner
• Reviewer
• Evidence references

Provider retention and training can be Not applicable for a self-hosted or internal model. Customer-ready also needs Last reviewed on and Last reviewed by.

When a feature may involve a decision about a person or business

This feature may involve a decision about a person or business. Record a specialist review (name or role, date) before marking it Customer-ready. The kit does not decide whether any rule applies.

Your team sets this answer; the kit never suggests it. Unsure works like Yes. The field is Specialist review recorded (name or role, date).

Changes and re-checks

Log each change to a feature in the Change log. A change marked Triggers re-check: Yes moves a Customer-ready or Published feature back to Verified and shows Re-check due until the re-check is recorded. Changes worth marking: a new model or provider, a change in which customer data reaches the model, or a change to a retention or training setting.

Disclosure

The disclosure, titled AI in our product, shows Last reviewed (date and reviewer role) and a Limits and open items section. That section stays on the page while any included feature has an open item.

Import columns

Feature-Register-Import.csv in your download has every column, with the same names as the dashboard. Common header variations are matched for you; review the matches before importing. A blank value reads as Unverified. If an imported record claims a state its facts do not support, the kit moves it back and says why. The change log and the evidence list import the same way.

Move records to another kit

• Package for the AI Questionnaire Response Kit: for each Customer-ready or Published feature, the evidence entries and answer rows for common customer questions. Each row keeps its evidence reference, checked date and limits, and arrives for your review, never as approved.
• Package for the ISO 42001 Evidence Collection Kit: the feature register and its evidence, as evidence sources you link to partner requests yourself. No standard clauses or request list are added.

Importing the same package again adds nothing twice.

Walkthrough

See the AI Feature Record Kit · Writing an AI feature disclosure from your records

More about your kit

Time and preparation

How quickly can I get started?

For the AI Governance Toolkit: About 15 to 30 minutes to a first useful entry, and 2 to 3 hours for a full setup. Each kit page gives that kit’s own planning estimate. These are estimates, not guarantees.

How long does completing a kit take?

Plan to work across several sessions. Gathering evidence, coordinating owners and obtaining approvals may extend the work over days or weeks. Start with one task and keep unresolved decisions visible; filling every field is not the same as implementing the work.

What should I prepare?

Bring one workflow or request, its accountable owner, relevant policies, vendor details and evidence locations. For questionnaires, bring the buyer’s questions; for ISO evidence collection, bring your partner’s request list; for SSPA, bring the requirements issued for your engagement.

Files, team use and updates

What will I produce?

A working dashboard, a portable work file and a report reflecting your reviewed entries. Excel is an optional readable export. Evidence references point to documents in your approved repository; those documents are not attached or verified by the dashboard.

0:08

How do I save and resume?

Choose Save my work to download a work file, check the file exists in Downloads and keep a dated copy in an approved location. Test Load a work file and confirm your company and first record. Loading replaces the current draft after confirmation, so save it first. Browser drafts are a convenience; HTML, Word and Excel are not restore files. Every working kit uses its own dashboard and Guided setup. Reports come from the entries you review. Supported inventory and action registers also accept Excel or CSV through Import records. Use the work file to restore the complete workspace; spreadsheets do not synchronize with it.

0:17

Can I bring my existing Excel or CSV records?

The included Excel (.xlsx) and CSV wizard supports AI inventory and actions in the Governance Toolkit, Policy and Shadow AI kits, and actions in the Questionnaire and SSPA kits. The ISO Evidence Collection kit has its separate CSV partner-request importer. Use Manual import, or choose Prepare a file with your AI and Copy import prompt to prepare your spreadsheet in work-approved AI. Paste the returned CSV or choose its file, confirm column matches and review duplicates before adding records. Compare AI-prepared data with your original spreadsheet; source details retain the prepared values, not the original workbook. Files are read locally in your browser. Original source values remain available for review; importing does not grant approval. Import history can undo a whole unchanged batch. Later edits or links to its records block undo to preserve subsequent work. Save a work file to retain records and import history. This is a reviewed import, not automatic synchronization.

How can my team share and work with the kit?

The purchasing company can use and adapt the kit internally. Keep one coordinator responsible for the current work file and share reviewed reports or dated exports through approved company locations. Each person’s dashboard copy is separate: there are no team accounts, simultaneous shared editing, automatic sync or automatic merging. For shared access or a separately scoped team version, email service@extrasphere.com to discuss your requirements. This is an inquiry route, not a currently included multi-user feature.

Can I use one kit for several companies?

Each kit is licensed to one company. Consultants buying for their own operations can use a standard kit. Delivering licensed copies to clients requires the Practitioner License or a separate license for each client company. See the published terms for company scope.

Do I get updates?

Updates are included for 12 months from purchase. Use your delivery email or Get a new download link for eligible updates. Keep a backup before loading your work into a newer version; check its compatibility notes.

Using an AI assistant

Is this self-service, and do I need an AI subscription?

Yes. Complete the dashboard yourself or use the included Draft with AI interview and advanced file workflow. Copy a section-specific prompt into your approved assistant and answer by voice or text. Bring its work file back to preview and apply selected fields. Your AI service and any required subscription are separate; you can always work without AI. Consulting and record review are scoped separately.

0:26

Can my AI agent work with existing files?

Yes, through the included request-and-review workflow. In Draft with AI, expand Advanced: work with your files, prepare a request and give it with the copied instructions to your approved agent. Select the evidence separately in that tool. Return the proposed response file to Draft with AI for review. This is file exchange, not a built-in connector or background sync. Local files may be processed by your AI provider; obtain the necessary company permission. The dashboard never automatically marks evidence verified or controls complete.

Which AI tools and voice features can I use?

The prompts use plain text and a documented response format for tools such as ChatGPT, Microsoft 365 Copilot, Claude or another approved assistant. Use an agent with permitted file access for the advanced workflow. Available voice, file and export features depend on the provider, plan and organization settings. Start with text if voice is unavailable; switch back to text for the response file. An AI link opens the provider without sending your prompt or starting voice. Universal tool compatibility is not guaranteed.

We already use several AI tools. Where should we start?

Start with one real use or request in this kit. Record its purpose, owner, data involved, affected people and the next open action. Draft with AI can interview you about those facts. The kit helps organize tools already in use; it does not discover accounts automatically, monitor staff or assess vendor settings on its own.

What if an AI draft cannot be imported?

Use Draft with AI → Paste AI draft or its response-file picker, not Load a work file. The draft must match the request from this dashboard and contain allowed fields. If entries changed while the assistant was working, prepare a fresh request to protect your newer work. Ask the assistant to correct any reported format error, or enter the reviewed values manually. Save my work retains your request and review history; keep that work file private.

Scope and support

Does completing the dashboard establish compliance?

No. Completed fields and review marks do not establish implementation, certification or independent assurance. Your team must adapt the records, verify the evidence, approve decisions and maintain the actual practices. These are independent preparation aids.

What support is included?

Purchase and access assistance is included. We reply to purchase inquiries and access problems within 2 business days. Implementation, legal advice and review of your completed records are separate services. See the published refund policy for its terms.

What should I send if something is blocked?

Run the compatibility check, click Copy results, and paste them into the IT request above or into an email to service@extrasphere.com. Include the kit name and version. Please do not send confidential evidence or unredacted work files.

What if the download, dashboard or report does not work?

For a missing email, check spam and your checkout address. Use your delivery email or Get a new download link for access; if it still fails, contact support with the order reference. Extract the entire ZIP before opening START-HERE.html. If report printing fails, download the HTML report and open it in your approved desktop browser.