Question 1

What types of AI does the mapper discover?

Accepted Answer

It discovers Core-AI Tech used to build AI solutions (LLMs, ML, Gen-AI, RAG), AI-Enabled SaaS tools (e.g., Notion, Salesforce) with embedded AI features, and Shadow AI - undisclosed products and accounts used internally or by your supply chain.

Question 2

How does the discovery process start?

Accepted Answer

We start externally with zero-permissions. No questionnaires required. We audit the technical reality of your supply chain, then move to authenticated discovery for deeper visibility.

Question 3

What is supply chain opacity?

Accepted Answer

Supply chain opacity is when your SaaS vendor silently wraps a third-party AI model - for example, a marketing tool sending data to OpenAI without disclosure. We expose these hidden dependencies.

Question 4

What standards is the certification aligned with?

Accepted Answer

Our framework is strictly aligned with ISO/IEC 42001:2023, leveraging Annex A (Controls) and Annex B (Implementation Guidance) to ensure international standard compliance.

Question 5

How long does the certification process take?

Accepted Answer

The process follows five steps: scope definition, automated and manual discovery, risk analysis, remediation guidance, and certificate issuance. Timeline varies based on scope and complexity.

Question 6

Can the mapper identify data retention risks?

Accepted Answer

Yes. We check if vendors might keep your private data for training or other purposes, a critical IP leakage risk that many organizations overlook.

Map Your Entire AI Landscape

AI Discovery

Core AI Tech

Categories

Supply Chain Risk

See Every AI Tool in Your Stack.

AI Asset Inventory

Deep Risk Assessment

AI Certification

Categorize Your AI Landscape

Technology Activity

Expose Hidden Supply Chain Risks

AI-Specific Governance Controls

Performance

Prove Compliance with Confidence

Vendors

Frequently asked questions

Secure your AI stack today