Elevate AI Governance & Data Protection Check
Is your team using AI safely?
Answer ten straightforward questions about how your business uses AI. Receive a clear action plan explaining what needs attention, what to verify and where to find the supporting guidance.
Make AI useful. Keep it accountable.
- No email required for results.
- No confidential uploads.
- Practical actions with supporting sources.
This educational self-check is based on your answers. It does not inspect your systems, establish every legal requirement or certify compliance.
The ten questions
Each question is about how your business uses AI today. You choose from set answers, and “I am not sure” is an answer where it is offered. No names, uploads or company details are asked for.
- What kind of business do you run?
- Which countries are connected with this AI use?
- What do your staff use AI for?
- What information goes into the AI tools?
- How do staff get access to their AI tools?
- What can the AI do with your other systems?
- How is important AI-generated work checked before it is used?
- Do staff have clear guidance on what they can and cannot do with AI?
- Who is responsible for overseeing AI use?
- Would staff know what to do if AI exposed information or made a serious mistake?
Illustrative example: made-up answers, not a real business
What a plan looks like
For a made-up professional services business in the UK, using AI for drafting with some customer information, with a review step in place and partly written guidance:
- 8Priority actions
- 1Scope note
- 1Reported in place, not verified
The number of actions is not a score.
Your priorities
- Make ownership clearPriorityReported as partly in placeNext stepIdentify the responsible person or team and explain the approval and escalation route.
- Give staff practical guidancePriorityReported as partly in placeNext stepUpdate relevant existing instructions with examples staff recognise. Do not buy a certificate merely because this check suggests training.
- Check how information about people is usedPriorityNot asked in this checkNext stepMap the information and purpose; ask the appropriate owner to verify permissions, notices and applicable requirements.
What you reported is in place
- Important output has a reported review stepReported in place, not verified
A real plan also lists every action in full, what to check with your team, the sources behind each action and what the check did not assess.
Your answers and privacy
- Worked out in your browser. Your answers are never kept in a form that could identify you, and are not put in the web address. Reloading or closing the page loses them.
- Emailed copy, if you ask for one. Your address, answers and report are sent once to build the email, then deleted within about a day. The email has a private link to your plan, kept for 30 days unless you delete it sooner. Anyone with the link can read the plan.
- AI explanation, if you tick its box. Your set answers and the fixed findings are sent once to Anthropic’s Claude to write and check it. Elevate keeps neither.
- “Ask about your plan”, if you use it. Each question is sent with your set answers to Anthropic’s Claude to write and check a reply. Elevate keeps neither.
- Update alerts, if you ask for them. Only your email address, the regions and topics you choose and a record of your consent are kept, until you stop them.
- Anonymous tally. When you create your plan, Elevate keeps the set answers you chose and your plan’s actions, with the week only. No name, address, company, IP address or anything you type. You can leave your answers out at the review step.
- Visit counts. The website counts visits and whether the check was started, finished or saved.
- Request records. The website’s ordinary request records still apply. The privacy notice explains them.