🐊 Your org is already using AI — the only question is whether you can see it. This kit is the 30-minute version of an AI governance program: find the tools, sort them, write the one page that sets the rules. It supports governance and policy workflows — it is not legal advice. Adapt it to your organization and obligations.

How to use this (3 steps)

1. Duplicate this page into your workspace (top-right).
2. One copy per client. Rename it: AI Inventory — [Client].
3. Run the 3-question drill (linked below), fill the inventory, then fill the policy blanks.

What's in the kit

• The AI Tool Inventory — a database below to log every tool you find, who uses it, what data goes in, and your verdict.
• The 3-Question Discovery Drill — the 30-minute process that surfaces almost every unapproved AI tool in an org.
• The 1-Page AI Acceptable-Use Policy — a fill-in-the-blank template that turns your triage into a document you can hand a client.

🐊 The kit finds the tools. The habit is governance. AxiomLens is the same muscle at compliance scale — 106 controls, computed coverage, local board reports, nothing phoning home after activation. It supports compliance documentation and audit-prep workflows (it's a tool, not a certification). See it run (2 min): youtu.be/namYnNbox4k · Store: thesecuritygator.gumroad.com · Free Tuesday issue: thesecuritygator.com

Siblings: Gatorbyte #001 — the 10-missed-controls field guide · #002 — the CSF Govern tracker · #003 — the Evidence Register.

AI Tool Inventory

The 3-Question Discovery Drill

1-Page AI Acceptable-Use Policy (template)