AI Governance Campaign Tool

AI Risk Snapshot

Classify the use case before AI enters the workflow.

Before AI enters a regulated workflow, classify the use case. This quick snapshot gives leaders a practical risk tier, likely governance gaps, and the controls to review before moving forward.

No login. No AI call. No data leaves this page.

• Run the snapshot
• Request a review

One use case. One first-pass answer.

The snapshot is intentionally narrow. It does not replace legal, compliance, security, vendor, or model validation review. It gives leadership a practical starting point before enthusiasm outruns control.

1. Describe the use case

   Capture what the AI system will do, where it sits in the workflow, and whether people, customers, or borrowers are affected.

2. Classify exposure

   Score data sensitivity, decision impact, vendor or model dependency, oversight, and documentation maturity.

3. Identify controls

   Get a risk tier, evidence checklist, and next-step recommendation for responsible review and implementation.

Run the snapshot.

Use plain business language. The result is generated locally in your browser and is meant for triage, not final approval.

AI use case name

Business function Internal operations or administration Sales, marketing, or customer support Loan operations, servicing, or compliance Credit, eligibility, underwriting, pricing, or adverse action

Most sensitive data involved Public or synthetic data only Internal business data Customer or borrower information Financial, credit, identity, health, or protected data

Customer or borrower impact No direct customer impact Indirect impact through staff workflow Customer-facing content or communication Could influence approval, eligibility, pricing, servicing, or dispute outcomes

Model or vendor dependency No model, rules only, or fully manual checklist Internal model with known controls Third-party AI tool or embedded vendor model Public/general AI model or unclear model lineage

Human review before action Human review required before any action Human review for exceptions only Human can review after output is used No clear human review point

Current documentation Use case, controls, testing, and owner documented Some documentation exists Idea is understood, but documentation is thin No documented scope, owner, testing, or controls

Impact if the AI output is wrong Minor rework or inconvenience Operational delay or customer confusion Compliance, financial, reputational, or complaint risk Potential consumer harm, unfair treatment, or regulatory exposure

Brief description

Generate snapshot Reset

This page uses browser-only scoring. Do not enter confidential borrower, customer, employee, or proprietary production data.

Moderate Risk

Complete the intake to generate a first-pass risk view.

The snapshot will identify the likely review path, control gaps, and evidence to gather before the use case moves forward.

Risk score: --

Primary Control Focus

• Define the use case owner and business objective.
• Document the data involved and the human review point.
• Confirm whether the output can affect a regulated outcome.

Evidence To Gather

• Use case intake and business justification.
• Data classification and access boundary.
• Testing plan, acceptance criteria, and monitoring owner.

Recommended Next Step

• Run the use case through a formal AI governance intake before implementation.

Document ID will generate after scoring.

Need a deeper review?

Epoch Manna helps regulated teams classify AI use cases, define controls, map evidence, and build implementation paths that leadership can actually govern.

Request a governance review