Where data goes when AI touches it, mapped from the record.
The Data-Flow Map shows where data goes when AI touches it: which tools, which models, which accounts. It is part of the Evidence Pack and is generated from the record.
Data protection assessments need to know where data flows, and with AI it changes constantly.
Assessments rest on assumptions and are wrong as soon as someone adds a tool.
of businesses using AI have security practices that cover it
DSIT, 2026The benefits of Data-Flow Map.
The people who feel the problem first.
A basis for assessments.
See where data really goes.
Answer client and regulator questions.
Three ways teams use Data-Flow Map.
Start an assessment from the real flows.
See which vendors touch which data.
Answer where data goes with confidence.
Works best alongside.
Register, data-flow map, control matrix and exception log, generated from the record.
See Evidence Packs RegisterEvery AI tool, account, agent and data flow in one living register.
See Register LogLog: the record of events.
See Log All of EvidenceA record of what AI saw, produced and who approved it, with reports against the regulations and your policies. Used with Guard.
See the Evidence modulePrices are indicative ranges, confirmed in writing before you commit. Estimates are replaced by your own figures once your health check runs.
See Data-Flow Map working on your business.
First findings within 48 hours of the health check · Audit fee credited against year one