Free to use
Two tools that run entirely in your browser.
An indicative CPS 230 readiness view and an EU AI Act risk-tier classification for a single use case. Your answers never leave your device, are not stored, and we cannot see them.
Both tools are built and run in your browser, so they do nothing with JavaScript disabled. Tell us what you are assessing at [email protected] and we will walk you through the same questions.
CPS 230 readiness check
Twelve questions across critical operations, impact tolerances, scenario testing, service-provider management, incident notification and governance. You get an indicative maturity band by domain, and the gaps worth closing first. A weak domain caps the band, because strength elsewhere does not offset it.
EU AI Act risk-tier classifier
Answer a short branching set of questions about one AI use case and see the risk tier it indicatively falls into, and what obligations tend to follow at that tier.
Our products
Software we are building in-house. It is not released. There is nothing to download today, and we will not publish a download link, a price or a release date until it is genuinely available.
A governed AI relay for regulated small enterprises. Every prompt to a model passes through PII masking, prompt-injection and rate guardrails, a governance preamble, a model adapter with fallback, and output verification, and is written to a tamper-evident audit chain under a hard spend cap. The point is the evidence it leaves behind: signed certificates, governance digests, a records-of-processing register and data-subject request handling.
Where it stands. Not released. The product is under our own internal audit, several findings are open, and independent verification of every scope item has not been completed. We will say so plainly here until that changes rather than describe it as available.
If WeConnect is relevant to what you are doing, tell us and we will keep you posted on where it gets to. We will not put you on a list you did not ask for.
Both tools give an indicative view to start a conversation. They are not advice, not an audit, and not a compliance determination. Nothing you enter is sent anywhere or stored.