AI Risk Assessment ToolAI Governance Toolkit
The documents and workbooks to run AI governance properly: an AI policy, one inventory of every AI system, a risk register that scores itself, an EU AI Act risk assessment, and, in Professional, the ISO/IEC 42001 gap assessment, NIST AI RMF mapping and AI vendor contract clauses.
Word and Excel files you own and edit. Dates reflect the EU AI Act as amended by the Digital Omnibus on AI (in force 27 July 2026).
What's inside
Starter · $199
- AI Use & Governance Policy (Word): Scope, principles, roles, approval process, prohibited uses, data rules, human oversight, incidents, AI literacy.
- AI System Inventory & Risk Register (Excel): Every AI system in one list; risk register with likelihood × impact scoring, ratings, review dates and a heat map that calculate themselves.
- AI System Risk Assessment (Excel): EU AI Act screening plus 32 risk questions across the NIST AI RMF functions, with a results page and gap list.
- Start-here guide with a 30-day plan (Word): What to do first, week by week.
Professional · $599
Everything in Starter, plus:
- ISO/IEC 42001 Gap Assessment (Excel): 45 plain-language questions across clauses 4–10 and Annex A areas A.2–A.10, a readiness summary and chart, and a 22-item audit evidence checklist.
- NIST AI RMF Mapping (Excel): All 19 categories with maturity scoring, evidence, owners and an indicative ISO/IEC 42001 crosswalk.
- AI Vendor Contract Clauses (Word): 14 clauses for buying AI — no training on your data, model change notice, incident notification, agent permissions, EU AI Act cooperation — each with a fallback position.
- Days 31–90 plan toward ISO/IEC 42001 certification (Word): From baseline gap assessment to booking a Stage 1 audit.
Starter or Professional?
| Starter | Professional | |
|---|---|---|
| Policy, inventory & risk register, per-system risk assessment | ✓ | ✓ |
| EU AI Act screening (24 questions) | ✓ | ✓ |
| 30-day plan | ✓ | ✓ |
| ISO/IEC 42001 gap assessment + evidence checklist | ✓ | |
| NIST AI RMF mapping (19 categories) | ✓ | |
| AI vendor contract clauses (14) | ✓ | |
| Days 31–90 plan toward certification | ✓ |
Choose Starter if you need AI governance working inside your organisation. Choose Professional if a customer, auditor or regulator will ask for evidence against ISO/IEC 42001 or the NIST AI RMF, or you're buying AI from vendors and need contract terms.
Try the free EU AI Act screening first — the toolkit's risk assessment workbook uses the same 24 questions.
Questions
What format are the files?
Word (.docx) and Excel (.xlsx). They open in Microsoft 365, Google Docs/Sheets and LibreOffice. Every workbook calculates its own scores and has a 'Start here' sheet.
Is this legal advice or a certification?
Neither. The toolkit gives you templates and a method; the EU AI Act screening is a screening; nothing in it certifies you. Have counsel review your policy and any high-risk classification.
Does it include the ISO/IEC 42001 standard?
No. The standard is copyrighted by ISO. The gap assessment uses the standard's clause numbers and area names with our own questions; buy the standard from ISO or your national standards body before an audit.
How do I get the files?
Right after payment you're taken to your download page, and Stripe emails your receipt. Keep the receipt: reply to it for updates or a refund.
Can I get a refund?
Yes, within 14 days of purchase: reply to your receipt email.