Three questions. Instant results. Know exactly where your organisation is exposed before a regulator does.
Takes under 60 seconds
Question 1 of 333%
Question 01 / 03
When a user revokes GDPR consent, how quickly do your AI systems stop processing their data?
This is the runtime consent check — the gap most enterprises cannot answer precisely.
Within the same session — we have real-time consent enforcement
Live consent token validation at the point of AI execution
Within hours — we sync consent status periodically
Batch or scheduled updates, not real-time enforcement
We're not certain — consent revocations aren't tracked at the AI layer
Policy exists but isn't enforced technically at runtime
Question 02 / 03
Can your DPO produce a verifiable audit trail of every AI decision made in the last 6 months?
The EU AI Act requires deployers of high-risk AI systems to retain audit logs. The burden of proof sits with you.
Yes — tamper-evident, timestamped logs ready for regulatory submission
Cryptographically signed records, retained and accessible
Partially — we have some logs but they're incomplete or not structured for audit
Logs exist but wouldn't satisfy a regulatory inspection or AI Office audit
No — AI decisions are not systematically logged at this level
No structured audit trail currently in place
Question 03 / 03
If an employee sends personal data to a third-party AI API at 3am, could you detect and block it?
The Runtime Execution Gap — the moment data leaves your network perimeter, the breach has already occurred.
Yes — a runtime enforcement layer intercepts and validates before data leaves
Active technical controls, not just policy
We would detect it after the fact — but not prevent it in real time
Monitoring exists, but enforcement is retrospective
No — we rely on employee policy and training, not technical enforcement
Passive controls only — the breach would occur before detection
Assessment Complete
Your AI Runtime Exposure Profile
What your answers reveal
Start with a Readiness Sprint
In five working days, we map your AI systems against EU AI Act deployer obligations, score your exposure, and deliver a written remediation roadmap your General Counsel can act on. Fixed fee. Written findings. No call required.
A free, three-question tool that gives an instant, plain-English read on where your AI stack may be exposed under the EU AI Act — before a regulator finds it. No email required.
Who built this?
Adesanya AI Advisory, a specialist EU AI Act compliance practice based in Dublin and instructed wherever the Act reaches, founded by Abdulwahab B. Adesanya, LL.M in Intellectual Property & IT Law (UCD).
What happens after I get my result?
Move straight to a Readiness Sprint — a five-day fixed-fee engagement mapping your AI systems against EU AI Act deployer obligations, with a written remediation roadmap.