Growtur

Free self-assessment · 3 minutes

Is your company using AI securely and in line with the AI Act?

AI security and compliance self-check for tourism companies and business groups.

Answer 15 questions on governance, data, security, the AI Act and people. You get a 0-100 score, your risk level and the gaps to close first.

15 questions · instant result

0 of 15 answered

Governance and accountability

Who decides, approves and answers for AI use.

Is there an internal AI use policy approved by management and known by the team?

Is there an internal AI use policy approved by management and known by the team?

Is there a named owner authorising new AI tools or uses?

Is there a named owner authorising new AI tools or uses?

Do you keep an up-to-date inventory of the AI tools used in the company?

Do you keep an up-to-date inventory of the AI tools used in the company?

Personal data and GDPR

What data goes into AI tools and under which legal basis.

Is entering customer or booking data into unapproved AI tools explicitly forbidden?

Is entering customer or booking data into unapproved AI tools explicitly forbidden?

Have data processing agreements been signed with AI vendors handling personal data?

Have data processing agreements been signed with AI vendors handling personal data?

Have privacy policies and customer notices been updated to reflect AI use?

Have privacy policies and customer notices been updated to reflect AI use?

Technical security

Access, accounts, secrets and tool control.

Are corporate accounts with two-factor authentication and no shared passwords used for AI tools?

Are corporate accounts with two-factor authentication and no shared passwords used for AI tools?

Is vendor training on your data switched off in the plans you have contracted?

Is vendor training on your data switched off in the plans you have contracted?

Do customer-facing chatbots or agents have limits, conversation logging and periodic review?

Do customer-facing chatbots or agents have limits, conversation logging and periodic review?

AI Act and transparency

Use classification, transparency and legal duties.

Have AI uses been classified by risk level under the EU AI Act?

Have AI uses been classified by risk level under the EU AI Act?

Are customers told when they talk to an AI system or when content was AI-generated?

Are customers told when they talk to an AI system or when content was AI-generated?

Do you review AI uses in pricing, recruitment or profiling against applicable duties?

Do you review AI uses in pricing, recruitment or profiling against applicable duties?

People and vendors

Team training and control over third parties using AI for you.

Has the team received specific training on safe and lawful AI use?

Has the team received specific training on safe and lawful AI use?

Is there a clear channel to report AI-related incidents or doubts?

Is there a clear channel to report AI-related incidents or doubts?

Are agencies and vendors required to declare and control their AI use in your services?

Are agencies and vendors required to declare and control their AI use in your services?

Get your result

Leave your details and we show the score instantly. We also email you the breakdown.