Twelve controls · six minutes

Most organisations can name their AI policy.
Very few can name who authorised the agent.

Regulators in Singapore, the US and the EU have converged on the same expectation: every autonomous agent carries a unique identity, and every action traces back to a human who authorised it. This assessment tells you how far your estate is from that, and which provisions you are exposed on.

Nothing is sent anywhere until you ask for the report. No account needed.