Free · 5 minutes · No signup
Scored against UK GDPR accountability expectations and Shadow AI exposure — plus EU AI Act Article 4 where you have EU exposure. Results shown immediately. Your answers never leave your browser.
Loading the assessment…
Shadow AI — the use of AI tools by employees without organisational visibility, policy, or oversight. It creates compliance exposure an organisation cannot see: client data entering public tools, no audit trail, and no register of what is in use.
EU AI Act Article 4 — the requirement, in force since 2 February 2025 under Regulation (EU) 2024/1689, for organisations to ensure all staff have a sufficient level of AI literacy proportionate to their role, with documentation. It is EU law, not UK law: it binds UK firms only where they have EU operations, EU clients, or systems or outputs used in the EU market.
Sometimes. The EU AI Act has extraterritorial scope: it can apply to UK organisations that supply AI systems into the EU, put AI systems into service in the EU, or provide AI-enabled services to EU clients or operations. A UK business with EU clients, EU staff, or EU-facing services should carry out a scope assessment rather than assume it falls outside the regime. Even where the EU AI Act does not directly apply, UK GDPR, sector regulator expectations, and contractual duties still require documented, governed AI use.
A Shadow AI Audit for UK SMEs costs from £2,500 + VAT and is delivered over a 30-day engagement. Where EU market exposure applies, it includes an EU AI Act Article 4 review. For complex or multi-entity regulated environments — multiple jurisdictions, more than one regulator, or group structures — scope and price are quoted on request.
No. The assessment runs entirely in your browser. Answers are not transmitted, stored, or attached to your identity. Results appear immediately and disappear when you leave the page.
Written by Chris Hampson, founder of Dousatsu. Delivered through DIOS, Dousatsu's five-plane AI governance framework.