Growtur

Free self-assessment · 3 minutes

Is your organisation using AI securely and in line with the AI Act?

AI security and compliance self-check for destinations, institutions and tourism associations.

Answer 15 questions on governance, data, security, the AI Act and people. You get a 0-100 score, your risk level and the gaps to close first.

15 questions · instant result

0 of 15 answered

Governance and accountability

Who decides, approves and answers for AI use.

Is there an approved, published AI use policy for the organisation's staff?

Is there an approved, published AI use policy for the organisation's staff?

Is there a named person or committee authorising new AI uses?

Is there a named person or committee authorising new AI uses?

Do you keep an up-to-date inventory of AI tools and uses across the organisation?

Do you keep an up-to-date inventory of AI tools and uses across the organisation?

Personal data and GDPR

What data goes into AI tools and under which legal basis.

Is entering citizens' personal data into unapproved AI tools explicitly forbidden?

Is entering citizens' personal data into unapproved AI tools explicitly forbidden?

Have your records of processing activities and privacy notices been updated to cover AI?

Have your records of processing activities and privacy notices been updated to cover AI?

Have you assessed whether a DPIA is required for AI uses involving personal data?

Have you assessed whether a DPIA is required for AI uses involving personal data?

Technical security

Access, accounts, secrets and tool control.

Are corporate accounts (not personal ones) with two-factor authentication used for AI tools?

Are corporate accounts (not personal ones) with two-factor authentication used for AI tools?

Is vendor training on your data switched off in the plans you have contracted?

Is vendor training on your data switched off in the plans you have contracted?

Are citizen-facing chatbots or agents controlled (limits, logging and review)?

Are citizen-facing chatbots or agents controlled (limits, logging and review)?

AI Act and transparency

Use classification, transparency and legal duties.

Have AI uses been classified by risk level under the EU AI Act?

Have AI uses been classified by risk level under the EU AI Act?

Are citizens told when they interact with an AI system or when content was AI-generated?

Are citizens told when they interact with an AI system or when content was AI-generated?

Do procurement documents include specific AI clauses (transparency, data, liability)?

Do procurement documents include specific AI clauses (transparency, data, liability)?

People and vendors

Team training and control over third parties using AI for you.

Has staff received specific training on safe and lawful AI use?

Has staff received specific training on safe and lawful AI use?

Is there a clear channel to report AI-related incidents or doubts?

Is there a clear channel to report AI-related incidents or doubts?

Are vendors and agencies required to declare and control their AI use in your services?

Are vendors and agencies required to declare and control their AI use in your services?

Get your result

Leave your details and we show the score instantly. We also email you the breakdown.