AI governance, made practical

Free templates and checklists you can hand to your team or clients, plain-English guides to NIST AI RMF, ISO 42001 and the EU AI Act, and a safety rating for every AI tool in our directory.

Check an AI tool for your firm (free report) Build an industry checklist Safest AI tools

Is your AI tool safe for client data?

Each page answers the questions buyers ask: does it train on your data, is it GDPR compliant, SOC 2 certified, HIPAA ready, and safe for lawyers or accountants.

Templates & checklists

Ready-to-use documents you can copy, download as Word and hand to your team or clients.

AI vendor assessment questionnaire24 questions to send any AI vendor before you share company or client data. AI acceptable use policy templateA one-page policy your staff will actually read: tools, data rules and responsibilities. AI risk assessment templateScore the risks of a new AI tool or use case in under 40 minutes. AI risk register templateOne list of every AI tool, its risks, controls, owner and review date. AI tool approval processFive steps and a request form to approve good AI tools in days, not months. Generative AI policy template for companiesThe company-wide position on ChatGPT, Claude, Gemini and Copilot. Shadow AI policyBring unapproved AI use into the open instead of driving it underground. Client AI disclosure templateEngagement letter clauses and notes that tell clients how you use AI. AI procurement checklistCommercial, legal, security and governance checks before you buy AI. AI due diligence checklistWhat to check before you rely on an AI vendor, partner or acquisition.

Frameworks & guides

NIST AI RMF, ISO/IEC 42001 and the EU AI Act in plain language, with practical guides.

AI governance framework for small and mid-sized firmsSix building blocks and a 30-day plan, mapped to NIST, ISO 42001 and the EU AI Act. NIST AI RMF checklistThe four NIST functions turned into a checklist you can tick off. ISO 42001 requirements and readiness checklistClauses, Annex A controls and a readiness checklist for certification. EU AI Act compliance checklist for businessesDates, risk categories and the duties that apply to companies using AI. How to evaluate AI tools for businessA weighted scorecard and a two-week pilot to pick the right tool. AI governance for small businessFive rules and an afternoon setup for firms without a compliance team. AI governance in PakistanWhere policy and law stand, and practical steps for Pakistani firms.

How we rate AI tools

SafeScore turns each vendor’s privacy policy, security certifications and AI policies into a 0–100 score, with the evidence and the date for every answer.

How SafeScore works

Templates and guides are general information, not legal advice. Adapt them with your own adviser.

Pick one more tool Compare