We don’t know which AI tools employees use
Shadow AI Risk Kit
A tool inventory, prioritized risks and an action plan.
$199USD · one timeSee the kit
Find the right AI Governance kit.
Take control of AI in your business. Find out how your team uses AI, set clear policies and show clients you use AI responsibly, with ready-to-use kits. No subscriptions.Choose a kit for the task, whether you’re starting out or building on existing work.
Prices are in US dollars. Your card provider converts the amount to your currency. Buying from outside the US
One-time purchase · One company
Choose by need
We need an AI policy
AI Policy & Rollout Kit
An editable policy and an approval record.
$249USD · one timeSee the kit
We need to approve and track AI use
AI Governance Toolkit
A register of AI uses, a decision log, and a leadership-ready report.
$299USD · one timeSee the kit
Clients are asking about our AI practices
AI Questionnaire Response Kit
A reviewed buyer pack with evidence references.
$399USD · one timeSee the kit
Need several AI Governance capabilities?
AI Foundation Bundle
Shadow AI Risk, Policy & Rollout and Governance Toolkit.
$747 separately. Save $148.
$599USD · one timeSee the bundle
AI Readiness Bundle
Shadow AI Risk, Policy & Rollout and Questionnaire Response.
$847 separately. Save $248.
$599USD · one timeSee the bundle
AI Management Bundle
Shadow AI Risk, Policy & Rollout, Governance Toolkit and Questionnaire Response.
$1,146 separately. Save $297.
$849USD · one timeSee the bundle
Building AI into your product?
Two Software edition offers for teams whose customers ask what the AI in the product does with their data. See the Software edition.
Show customers how AI works in your product.
AI Feature Record Kit Software edition
A verified record per AI feature and a reviewed customer disclosure.
$399USD · one timeSee the kit
Product AI Bundle Software edition
AI Feature Record, Questionnaire Response and Shadow AI Risk.
$997 separately. Save $198.
$799USD · one timeSee the bundle
Preparing for a specific requirement?
ISO/IEC 42001 preparation, or Microsoft Section K. Not sure whether Section K applies? Does Section K apply to us?
Get ready for your ISO 42001 review.
ISO 42001 Evidence Collection Kit
An organized evidence index and a clear partner handover.
$399USD · one timeSee the kit
Prepare for your Microsoft supplier review.
SSPA Section K Readiness Kit
An evidence map, gap list and handover report.
$599USD · one timeSee the kit
For consultants
Deliver AI Governance work to clients
Practitioner Starter or Practitioner License, for consultants delivering to client companies
Core kits: Shadow AI Risk Kit, AI Policy & Rollout Kit, AI Governance Toolkit and AI Questionnaire Response Kit. Not included: AI Feature Record Kit, ISO 42001 Evidence Collection Kit and SSPA Section K Readiness (each sold separately).
Practitioner Starter: two named client companies. Practitioner License: five. Each adds your firm’s internal use.
Not sure? Help me choose Compare the kits Buying for clients? See Practitioner licensing
System requirements
- Computer
- A Windows 10 or 11 PC, or a Mac with a current macOS.
- Browser
- A current version of Chrome, Edge, Safari or Firefox.
- Folder
- The ZIP extracted to a folder on the computer, such as Documents. Not opened from inside the ZIP, an email or a synced folder.
- Size
- A kit ZIP is about 1 to 5 MB; bundles and the Practitioner master are larger. Allow 40 MB once extracted.
- Screen
- A desktop browser window on a laptop or desktop screen.
Not supported: phones, tablets (iPads included) and Chromebooks. Virtual desktops (Citrix and similar) work only if the browser keeps its saved data between sessions, so save a work file before you sign out.
Downloaded on Windows? Before you extract it, right-click the ZIP, choose Properties, tick Unblock and press OK, so Windows stops treating the files inside as blocked internet downloads. On a Mac, double-click the ZIP to extract it; if macOS warns that a file came from the internet, choose Open, or ask IT to clear the quarantine flag on the kit folder.
What the kit needs from a work computer · IT checklist (plain text)
Educational material, not legal advice. Independent and not affiliated with Microsoft, ISO, the IEC, NIST, or the European Union.