EU AI Act watch

EUThe AI Act's high-risk duties moved: stand-alone systems now apply from 2 December 2027 — not August 2026 EUDigital Omnibus on AI (Regulation (EU) 2026/1744) in force since 27 July 2026 — 3 AI Act dates changed EUTransparency duties apply since 2 August 2026: chatbots must say they are AI, synthetic content must be marked EU2 December 2026: new Article 5 bans and the marking deadline for generative systems already on the market EUAI embedded in regulated products — machinery, medical devices, vehicles — becomes high-risk on 2 August 2028 EUGDPR Article 22 already governs solely automated decisions about people in the EU — no AI Act date needed

From the founder: why a policy template is not AI governance ↗

Free AI Scorecard Free 15-day trial Trust Center Sign in

🗂️ Included in every plan

Looking for an AI use case inventory tool?

“What AI are we actually using?” is the first question every board, auditor, and insurer asks — and the one most organizations cannot answer. GOVERNBOX.ai gives every AI system a stable UC-### id, a named owner, a data-sensitivity rating, and a review date — including the shadow AI nobody signed off on.

See plans →Assess your AI readiness — free scorecard →

More than a list of tools

What a defensible AI inventory actually captures

An inventory that satisfies an auditor answers five questions per system. The AI Use Case Log structures all five at intake:

🆔

Identity & ownership

Stable UC-### ids, the tool/vendor behind each use case, the department running it, and — the one auditors always check — a named human owner.

🔐

Data sensitivity

What data each system touches, rated public → internal → confidential → restricted, so 'what can staff paste into it?' has a real answer.

💼

Business value & lineage

Why the tool exists, what manual process it replaced, and its lifecycle status — draft, active, under review, or retired.

📅

Review dates that bite

Every entry carries a review date; overdue reviews turn red on the log and fire notifications — an inventory that stays current instead of rotting.

The hub of your governance program

Every governance record traces back to a use case

The inventory is not a standalone list — it is the spine of the whole system of record. Click any use case and see everything connected to it:

⚠️

Risk register entries

📝

Impact assessments

🎓

Training items

🚨

Incidents

🛠️

AI projects

📌

Board tasks

🤖

AI agents

📊

Board report rollup

That is the difference between a spreadsheet and a system of record: when the board asks about a tool, you show its owner, its risks, its training coverage, and its incident history — from one screen.

Transparent pricing

Simple, Honest Pricing

Start with the free Scorecard, then choose the plan that fits. One flat price for your whole organization, never per seat.

Prices below are for the AI Governance module — the first of four GOVERNBOX modules. See modular pricing →

💙 Nonprofits save 20% on every plan — enter code NONPROFIT20 at checkout

Starter

$3,500/yr

≈ €3,010

or $339 (≈ €292)/mo billed monthly

🏛️ Nonprofit: $2,800 (≈ €2,410)/yr · code NONPROFIT20

✓The full AI Governance module
✓AI Use Policy + AI Acceptable Use Standard — grounded, every clause cited
✓Frameworks and laws: NIST AI RMF · ISO/IEC 42001 · EU AI Act · European Union AI law & guidance · Italy AI law & guidance
✓Risk Register + Impact Assessments
✓Privacy module — privacy program, privacy impact assessments + Privacy Policy
✓Vendor + AI System registries (approval status, terms on file, everything linked)
✓Incident log, Training plan, full Board Report
✓AI Cost Tracking & Roll-Up (per use case + program office)
✓AI Agents inventory (basic registration)
✓AI Project Management — up to 2 concurrent projects
✓Governance Badge + live public Trust Page
✓Employee Attestation Portal — unlimited signers
✓Regulatory horizon feed
✓Word + PDF export
✓Staff AI-tool reporting portal — anonymous shadow-AI intake, no login
✓Shadow AI Discovery
✓REST API (read)
✓Unlimited staff participants — report AI tools, sign policies & complete training, no seat required
✓Pay by card or ACH bank transfer
✓10 admin seats

Choose Starter →

Frequently asked questions

What is an AI use case inventory?

A single, structured register of every AI system your organization uses — what it does, which department runs it, who owns it, what data it touches, and when it was last reviewed. It is the first artifact an auditor, insurer, or board asks for, and the foundation every other governance practice (risk, training, incident response) builds on.

Why is an AI inventory the first thing auditors ask for?

Because you cannot govern what you cannot name. Auditors check whether an AI policy exists, but the real test is whether you can prove who owns each AI system, what data it uses, how it was tested, how it is monitored, and what happens when it fails — and all five answers start with a complete inventory.

How does GOVERNBOX.ai handle shadow AI?

The intake is deliberately fast and plain-language, so the AI tools staff adopted without sign-off actually get logged instead of hidden. Every entry gets a stable UC-### id, a named owner, and a review date — and the dashboard flags tools with no owner or an overdue review, so shadow AI cannot quietly persist.

What connects to each inventory entry?

Everything. Each use case links to its risk register entries, impact assessments, training items, incidents, AI projects, board tasks, and registered AI agents — one click on a use case shows every governance record that traces back to it. The quarterly board report and compliance crosswalks are computed from the same data.

Can I try the AI inventory before buying?

Yes. The free AI Readiness Scorecard shows your gaps with no account, and the demo library walks through the AI Use Case Inventory, Risk Register, Training, Incidents, Projects, and the Board Report before you commit.

Is a spreadsheet good enough for an AI inventory?

A spreadsheet can list tools, but it cannot enforce named owners, flag overdue reviews, screen new use cases at intake, trace risks and incidents back to systems, or roll the whole thing into a board report. The moment someone asks 'prove it,' the spreadsheet becomes the gap.

Know every AI system you run — and prove it.

Every plan includes the AI Use Case Inventory — log your real tools and see the system of record build itself.

See plans →Talk to an expert