Free AI governance and data protection tools
Templates, questionnaires and calculators for AI governance and privacy work: each tool produces a draft in minutes, with no sign-up, for you to review with your team. Educational tools, not legal advice.
Flows by task
Sequences of tools for a whole task, ending in the free assessment for the topic.
- Start AI governanceFrom diagnosis to a first set of controls: know where you stand, set the rules of use, register the systems and train the people.4 tools · RAIF
- Prepare your organisation for the EU AI ActKnow which systems you have, which risk tier each one falls into, which assessment to run and what to ask your vendors.5 tools · RAIP
- GDPR and LGPD compliance basicsThe documents a regulator asks for first: the record of processing, the lawful basis of each activity, the DPIA and the breach response plan.4 tools · DPAI
- Get AI governance audit-readyFrom roles to evidence: set who answers for what, record the risks, measure the distance to ISO/IEC 42001 and plan the audit tests.4 tools · AUDAI
By profile
All tools
15 tools
- AI acceptable use policyNewA complete draft of your generative AI policy, adapted to your sector and size, ready to review with your legal team.AI governance · RAIF, RAIP
- DPIA templateNewHigh-risk screening, a risk matrix, measures and an AI section in a draft ready to review with your DPO.Data protection · DPAI, RAIP
- EU AI Act risk classifierNewA guided questionnaire: risk tier, role in the value chain and indicative obligations under the EU AI Act.AI risk and impact · RAIF, RAIP
- AI literacy training planNewTraining by group of people, from general users to operators of high-risk systems, with the records that show what was done.AI governance · RAIF, RAIL
- Lawful basis selector (GDPR and LGPD)NewAnswer simple questions about the processing and see the best lawful basis, the alternatives and what to rule out.Data protection · DPAI
- ROPA templateNewOne row per activity, with lawful basis, retention and security, and a check of what is still missing.Data protection · DPAI
- Breach notification deadline calculatorNewEnter when you became aware of the breach and see every deadline, in clock hours (GDPR) and business days (LGPD).Security incidents · DPAI
- AI inventory templateNewFrom intake form to register row: use case record, internal risk rating and next steps.AI risk and impact · RAIF, RAIP
- AI vendor due diligence questionnaireNewFifteen questions on data, security, transparency and the EU AI Act, with a recommendation and contract clauses.Vendors and third parties · RAIP, AUDAI
- AI governance maturity assessmentNewEight questions, an index from 0 to 100 and the three gaps to tackle first.AI governance · RAIL, RAI-X
- AI risk registerNewLikelihood, impact and controls for each risk, with bands, a heat map and links to the NIST AI RMF, the EU AI Act and the GDPR.AI risk and impact · RAIP, RAIL
- ISO/IEC 42001 gap analysisNew32 checks across clauses 4 to 10 and the Annex A themes, with readiness, gaps and a roadmap.AI governance · RAIL, AUDAI
- AI audit checklistNewFrom scope to work programme: tests per area, evidence by owner, priority and estimated effort.AI governance · AUDAI
- AI governance RACI matrixNewWho is accountable, who does the work, who is consulted and who is informed for each AI governance activity, with warnings when a function is missing.AI governance · RAIL, RAI-X
- FRIA templateNewArt. 27 screening, the six required elements, a risk matrix per right and next steps in a draft ready to review.AI risk and impact · RAIP, DPAI