Your team trusts every AI tool in this lineup.
One is moving data out.
Shadow AI, personal accounts, and agents that reach into your systems all look like sanctioned work. Run the sweep on your own stack in fifteen questions and see the exposure path before someone else does.
of the people using AI at work bring their own AI tools.
of employees using AI on corporate devices sign in with a personal account.
of organizations have evidence or suspect employees use public generative AI at work.
Five weighted signals, one exposure score.
The Index scores where AI-era data risk actually lives, from whether you can see AI use at all to whether you can act on it. Each signal carries a weight; together they resolve to a single reading from 0 to 100.
From Contained to Critical.
Your answers resolve to one of five bands. The band is a starting point, not a grade: it tells you how far AI-era data can move before something stops it.
Real exposure sits in more than one signal. This is where most teams are today.
Get your reading in about four minutes.
Answer fifteen questions across the five signals and see your exposure score and band immediately. No registration to see your result.
Run the assessment →Runs entirely in your browser. Nothing is sent anywhere until you ask for the report.
Field notes on AI-era insider risk.
What is AI insider risk?
How AI-era insider risk differs from classic insider threat, and how to measure it.
Shadow AI and the personal-account blind spot
Why the sharpest edge of AI insider risk runs on accounts your tenant never sees.
The one-week shadow AI playbook
A five-day plan to inventory shadow AI using signals you already have.
AI insider risk KPIs for the board
A small set of defensible metrics a board can read and track over time.
A vendor-neutral instrument.
The Index weights the two signals where AI-era data actually leaks, visibility and movement, most heavily, because you cannot govern what you cannot see. Every figure on this site comes from a major research source and is cited where it appears. No vendor is named in the scoring.
See how exposed you are.
Fifteen questions, about four minutes, your result in your browser.
Run the assessment →