Find the AI you did not know you were using
The AI tools you know about are rarely all of them. Someone signs up with a work email, another expenses a subscription, and your register quietly falls behind reality. Here is how to close the gap.
Updated May 2026
Why it matters
A register that misses half your AI is worse than honest about it, because it looks complete. The tools most likely to be missed, the ones a single team adopted quietly, are also the ones most likely to be a high-risk use nobody reviewed.
Three ways to surface it
- Connect a source. On Governance, auto-discovery reads sign-in and expense data and surfaces the tools your team actually uses. It is the fastest and most complete. See what auto-discovery does.
- Check expense and card data. AI subscriptions paid on company cards are a common blind spot. Even without a connector, a quick look through recent expenses turns up tools worth adding.
- Ask each team one question. "Which AI tools do you use, and what for?" gets you the uses, which is what classification needs anyway. See write a good use description.
Auto-discovery connects to the systems you already run and surfaces the AI tools your team uses. What it reads, what it never touches, and its beta status.
How to build your risk register with the add-systems wizard: pick tools from the library or add your own, then say what you use each one for.
Classification is driven by how you use a tool, not the tool itself. How to describe a use so the tier is accurate.
Still need help?
Get in touch and a human will answer, or book a short walkthrough.