How long does the data and security assessment take?

About five minutes. There are twelve questions: two about your firm and where you are with AI, and ten scored questions, two for each pass of the audit. It is free.

What does the scorecard show?

Your score on each of the five passes (Inventory, Classification, Provenance, Governance, and Security and monitoring), a total out of 20, a verdict from "Not ready to connect" to "Governed", the pass to start on, and up to four findings tied to your answers.

What if my firm's estate is already in good shape?

The assessment says so and tells you to keep it that way. When every pass scores 4 of 4 there is no weak pass to name, and the value is in re-running the review, because a permission list is accurate for about a quarter.

Free data & security assessment

Find out which pass your firm is behind on.

Twelve questions about your own document estate, scored against the five passes of the CRE AI data and security audit. You get a scorecard, the pass to start on, and the specific findings to go and look for.

12 questions · About 5 minutes

If your estate is already in good shape, the assessment says so and tells you to keep it that way. That is the point of it.

Prefer to read first? The full five-pass framework is published in full, free and ungated.

How the assessment works

What the data and security assessment scores

The assessment scores your firm's own document estate against the five passes of the CRE AI data and security audit: Inventory, Classification, Provenance, Governance, and Security and monitoring. It asks whether the estate is ready before you connect AI to the company drive.

It ends on a named pass and a list of findings rather than a price, because most of that work is something the firm does itself. After the scorecard, one more screen offers a thirty-minute governance audit call with PSV.

What it measures: Two context questions about your firm and how far it has already connected AI, then ten scored questions, two for each pass:
01 Inventory: What exists, and who owns it?
02 Classification: What may be read, and what never?
03 Provenance: Which document is the source of truth?
04 Governance: What can it draft, and what needs a person?
05 Security and monitoring: Can you prove it after it is on?
How long it takes: About five minutes for twelve questions, one at a time. Before the scorecard you give a first name, work email and phone, with company and role optional.
What you get: A score out of 20, each pass scored out of 4 and marked clear, partial or gap, a verdict, the pass to start on, and up to four findings keyed to the exact answers you gave. A copy is emailed to you with the full five-pass audit framework.

Common questions

How long does the data and security assessment take?: About five minutes. There are twelve questions: two about your firm and where you are with AI, and ten scored questions, two for each pass of the audit. It is free.
What does the scorecard show?: Your score on each of the five passes (Inventory, Classification, Provenance, Governance, and Security and monitoring), a total out of 20, a verdict from "Not ready to connect" to "Governed", the pass to start on, and up to four findings tied to your answers.
What if my firm's estate is already in good shape?: The assessment says so and tells you to keep it that way. When every pass scores 4 of 4 there is no weak pass to name, and the value is in re-running the review, because a permission list is accurate for about a quarter.