Free workplace tool · 3–5 minutes · No sign-up
AI Exposure Check
AI may already be inside your business. The question is whether anyone is managing the risk.
Employees increasingly use tools such as ChatGPT, Microsoft Copilot and Gemini for everyday work. That can be genuinely useful. Exposure appears when nobody knows which tools are in use, when staff work through personal accounts, when confidential information is pasted into AI systems, when AI answers are trusted without checking, or when nobody owns AI questions and incidents.
AI itself is not the problem. Unmanaged use is.
Using AI and being ready for AI are not the same thing.
AI adoption asks “are we using AI?”. AI readiness asks “can we use AI without creating unmanaged problems?”. This check is about the second question.
AI exposure questions
16 short questions about how AI is actually used in your business. No account, no email address, and your answers are never sent to an AI service.
How this check is built
The questions cover nine practical areas: visibility of AI tools, handling of business information, human verification, decision authority, tool governance, account and integration security, staff understanding, incident response and operational dependence. Scoring is deterministic and runs locally — the same answers always produce the same result.
The risk concepts reflect widely published guidance from national cybersecurity and data-protection bodies and from the NIST AI Risk Management Framework. WorkplaceReady is independent and is not endorsed by, affiliated with or certified by any of those organisations, and this check is not a compliance assessment.
Frequently asked questions
What does the AI Exposure Check actually measure?+
It measures whether AI use inside your business is being managed — visibility of tools, handling of business information, human verification, decision authority, account security, staff understanding, incident response and operational dependence. It does not measure how advanced your AI use is.
Is this an AI compliance or EU AI Act audit?+
No. This is a free practical exposure check, not a legal, regulatory or compliance assessment. It will not tell you whether you meet any specific obligation, and it is not a technical security scan.
Is using AI at work risky?+
AI itself is not inherently unsafe. The exposure comes from unmanaged use — nobody knowing which tools are in play, sensitive information being pasted into personal accounts, or AI output influencing decisions without a human check.
Do I need an AI policy?+
Not necessarily a formal document. Many small businesses have sensible controls without one. What matters is that people know which tools are approved, what information must never go in, when a human must check the work, and who to ask.
Do you store my answers?+
No. The check runs in your browser, needs no account and no email address, and your answers are not sent to any AI service.
Related Business Readiness Tools
Continue with another practical tool from WorkplaceReady.
Readiness Assessment
AI Readiness Assessment
The premium next step after the free exposure check: an eight-area AI readiness baseline with prioritised actions and a 30/60/90-day plan.
OpenCybersecurity
Cyber Attack Exposure Check
Quickly estimate how exposed your business may be to today's most common cyber threats — phishing, business email compromise, ransomware and more. Practical estimate, not a penetration test.
Open