⚡ Try GOVERNBOX free for 15 daysAll five modules · no credit card · nothing to cancelStart 15-Day Free Trial →

AI law watch

CTUsing an AI hiring tool stops being a defense October 1, 2026 COColorado repealed its AI Act — the ADMT law replacing it starts January 1, 2027 CACalifornia's ADMT rules under the CCPA carry that same January 1, 2027 date TXTexas TRAIGA has been in force since January 1, 2026 — penalties reach $200,000 HIHawaiʻi's two AI acts took effect on approval, July 14, 2026 US1,561 state AI bills introduced in 2026 — see which states you need to care about CANCanada has no AI Act — but Québec's automated-decision law has applied since September 2023

🗂️ Included in the 15-day free trial

Looking for an AI use case inventory tool?

“What AI are we actually using?” is the first question every board, auditor, and insurer asks — and the one most organizations cannot answer. GOVERNBOX.ai gives every AI system a stable UC-### id, a named owner, a data-sensitivity rating, and a review date — including the shadow AI nobody signed off on.

Start your 15-day free trial →Assess your AI readiness — free scorecard →

More than a list of tools

What a defensible AI inventory actually captures

An inventory that satisfies an auditor answers five questions per system. The AI Use Case Log structures all five at intake:

🆔

Identity & ownership

Stable UC-### ids, the tool/vendor behind each use case, the department running it, and — the one auditors always check — a named human owner.

🔐

Data sensitivity

What data each system touches, rated public → internal → confidential → restricted, so 'what can staff paste into it?' has a real answer.

💼

Business value & lineage

Why the tool exists, what manual process it replaced, and its lifecycle status — draft, active, under review, or retired.

📅

Review dates that bite

Every entry carries a review date; overdue reviews turn red on the log and fire notifications — an inventory that stays current instead of rotting.

The hub of your governance program

Every governance record traces back to a use case

The inventory is not a standalone list — it is the spine of the whole system of record. Click any use case and see everything connected to it:

⚠️

Risk register entries

📝

Impact assessments

🎓

Training items

🚨

Incidents

🛠️

AI projects

📌

Board tasks

🤖

AI agents

📊

Board report rollup

That is the difference between a spreadsheet and a system of record: when the board asks about a tool, you show its owner, its risks, its training coverage, and its incident history — from one screen.

Transparent pricing

Simple, Honest Pricing

Start with the free Scorecard, then take the 15-day free trial — no credit card, nothing to cancel. On day 15 your workspace stays exactly as you left it until you pick a plan.

Prices below are for the AI Governance module — the first of four GOVERNBOX modules. See modular pricing →

💙 Nonprofits save 20% on every plan — enter code NONPROFIT20 at checkout

⚡ Not ready to pick a plan?

Test drive GOVERNBOX free for 15 days — no credit card needed.

Start 15-Day Free Trial →

✓ Instant access · 15 days free · Zero credit card required

Starter

$3,500/yr

or $339/mo billed monthly

🏛️ Nonprofit: $2,800/yr · code NONPROFIT20

✓The full AI Governance module
✓AI Use Policy + AI Acceptable Use Standard
✓NIST AI RMF + ISO 42001 crosswalks
✓Every U.S. state AI law, added as they pass — Colorado ADMT Act (SB 26-189), Colorado Chatbot Safety (HB 26-1263), Connecticut SB 5 (PA 26-15), Texas TRAIGA, California ADMT Regulations, Hawaii AI Acts (247 / 248)
✓Plus specific statutes from 27 states via the U.S. state law landscape
✓United States — federal law & state landscape (U.S. National)
✓Risk Register + Impact Assessments
✓Incident log, Training plan, full Board Report
✓AI Cost Tracking & Roll-Up (per use case + program office)
✓AI Agents inventory (basic registration)
✓AI Project Management — up to 2 concurrent projects
✓Governance Badge + live public Trust Page
✓Employee Attestation Portal — unlimited signers
✓Regulatory horizon feed
✓Word + PDF export
✓Staff AI-tool reporting portal — anonymous shadow-AI intake, no login
✓Unlimited staff participants — report AI tools, sign policies & complete training, no seat required
✓10 admin seats

Try Starter free for 15 days →

✓ Instant access · 15 days free · Zero credit card required

Frequently asked questions

What is an AI use case inventory?

A single, structured register of every AI system your organization uses — what it does, which department runs it, who owns it, what data it touches, and when it was last reviewed. It is the first artifact an auditor, insurer, or board asks for, and the foundation every other governance practice (risk, training, incident response) builds on.

Why is an AI inventory the first thing auditors ask for?

Because you cannot govern what you cannot name. Auditors check whether an AI policy exists, but the real test is whether you can prove who owns each AI system, what data it uses, how it was tested, how it is monitored, and what happens when it fails — and all five answers start with a complete inventory.

How does GOVERNBOX.ai handle shadow AI?

The intake is deliberately fast and plain-language, so the AI tools staff adopted without sign-off actually get logged instead of hidden. Every entry gets a stable UC-### id, a named owner, and a review date — and the dashboard flags tools with no owner or an overdue review, so shadow AI cannot quietly persist.

What connects to each inventory entry?

Everything. Each use case links to its risk register entries, impact assessments, training items, incidents, AI projects, board tasks, and registered AI agents — one click on a use case shows every governance record that traces back to it. The quarterly board report and compliance crosswalks are computed from the same data.

Can I try the AI inventory before buying?

Yes — the 15-day free trial — no credit card, and it expires rather than converting — includes the AI Use Case Inventory, Risk Register, Training, Incidents, Projects, and the Board Report, capped at 2 records per module. Enough to genuinely work the tool with your own AI systems before you commit.

Is a spreadsheet good enough for an AI inventory?

A spreadsheet can list tools, but it cannot enforce named owners, flag overdue reviews, screen new use cases at intake, trace risks and incidents back to systems, or roll the whole thing into a board report. The moment someone asks 'prove it,' the spreadsheet becomes the gap.

Know every AI system you run — and prove it.

The 15-day free trial includes the AI Use Case Inventory — log your real tools and see the system of record build itself.

Start your free trial →Talk to an expert