What to track
Detected tools, declared usage, teams, data potentially entered, risk level, review status, owner and change date.
AI register
AI register for business: build a usable baseline for DPOs and management
An AI register tracks tools and use cases over time. It helps move from a one-off snapshot to a living governance baseline.
Why export matters
A useful register can be shared with a DPO, management, GDPR consultancy or project team.
How to maintain it
Updates should be simple: new tools, status changes, declared usage and next review.
Recommended structure
Use this as a starting point before involving legal or compliance specialists.
- Tool identifier.
- Domain and vendor.
- Business use.
- Initial risk.
- Review owner.
- Last update.
- PDF or CSV export.
FAQ
Is an AI register mandatory?
Obligations depend on the role and systems. In practice, a register helps show that the company knows what it uses.
Who should own it?
Often an operational pair: management, IT, internal or external DPO depending on company size.
Which format should I choose?
Start simple, but keep it exportable and readable.
See what AIMapper produces
Explore a sample report, then join the beta to build your first AI inventory.