1–2
Tool + business use
Capture name, vendor, requester, intended use, and whether outputs go external or customer-facing.
Free sample · Lead magnet
A structured first-pass checklist for reviewing an AI tool before approving it for business use: use case, data types, vendor questions, risk rating, controls, and decision owner.
No signup required for the download on this local draft. Operational template only — not legal, compliance, privacy, security, HR, or professional advice.
Print or fill digitally. Designed for a single tool review in one sitting — not an enterprise questionnaire dump.
1–2
Capture name, vendor, requester, intended use, and whether outputs go external or customer-facing.
3–4
Flag customer/HR/finance/code/secrets risk. Ask training, retention, admin controls, SSO/MFA, integrations.
5–7
Rate Low / Medium / High / Stop. Note required controls. Prefer Conditional for first intake; Approved ≠ unrestricted. Record Reject or Escalate when needed — with an owner.
Illustrative examples of how the lite checklist ends. The full kit adds a living approved-tool register, playbooks, and sample completed reviews.
| Tool | Data risk | First-pass risk | Decision | Owner next step |
|---|---|---|---|---|
| Grammarly Business | Internal drafts only | Low | Conditional | Business plan + MFA; Promote later if controls stay clean |
| ChatGPT (personal / free) | Any company work | High | Not approved | Point staff to business workspace; run full kit review for ChatGPT Team |
| Meeting bot (unknown vendor) | Call recordings | High | Escalate | Hold until DPA + retention + consent answers |
Fictional first-pass examples aligned to the kit’s Conditional-first rule (Low still starts Conditional; personal/free accounts → Not approved). The free download is blank for your tool. Not a recommendation for any vendor.
The checklist answers “can we use this tool?” The kit answers “how do we run AI guardrails for the whole organization?”
Free
Paid · notify mode
No. On this draft site the print-ready HTML downloads without signup. The notify form is optional — only if you want launch updates for the full kit.
No. It is an operational first-pass checklist. It does not certify any framework and is not legal, privacy, security, HR, or professional advice. Review with your stakeholders before adopting.
The free file reviews one tool. The kit adds policy, approved-tool register, shadow-AI discovery, employee FAQ, incident path, quarterly review, six tool-category playbooks, and sixteen filled sample artifacts — plus MSP delivery materials in the $299 pack.
Yes as a practical worksheet. For repeatable client engagements (pitch, discovery, scope, handoff, practitioner license), use the MSP Pack when checkout opens — MSP path.
Self-contained print-ready HTML. Open in any browser and use Print → PDF if you want a PDF. No account or installer required.
Also free: One-Page AI Do / Don’t List → · How the full method works →