How it works

There are 12 multiple-choice questions. When you don’t know the answer, choose "We don’t know": that also says a lot about the company.
The result appears on screen with the maturity level, in four bands, and the 3 priorities explained.
You can download the result as a PDF or print it.

The questionnaire

Answer with the whole company in mind, beyond your own department.

Question 1 of 12Which AI tools does your team use at work?
Check every one you know of. This question is not scored and appears in the result. You can check more than one.
ChatGPTGeminiMicrosoft CopilotClaudeCoding assistant (GitHub Copilot, Cursor or another)AI built into other systems (CRM, email, customer service)OthersI can’t say
Question 2 of 12Does the company know which AI tools each department uses?
Yes. We keep an up-to-date list of the tools and who uses each one.We know the main ones, but there is no list.We know the team uses them, but nobody has listed which ones.We don’t know.
Question 3 of 12Is there a written AI use policy approved by management?
Yes, approved and known to the team.It exists, but few people have read it.There is only informal guidance, by message or in meetings.There is none.
Question 4 of 12Has client data (names, tax IDs, contracts, spreadsheets) ever been pasted into AI tools?
No. A rule forbids it and someone checks.We believe not, but we have no way to check.Yes, it has happened.We don’t know.
Question 5 of 12Do source code, passwords or system access keys go into AI tools?
The company does not develop software.Only in an approved tool, with a rule for secrets and a review.Developers use AI with no defined rule.Yes, we have seen a password or key pasted into a prompt.We don’t know.
Question 6 of 12Do people use AI with company accounts or personal accounts?
Only company accounts, with centralized login.There are company accounts, but personal accounts are used too.Each person uses their own personal account.We don’t know.
Question 7 of 12In the accounts in use, is the use of submitted content for model training turned off?
Free and personal plans may use what is sent to improve the model. Business plans usually let you turn that off.
Yes, we checked every account.In some of the accounts.No.We don’t know.
Question 8 of 12Can the company tell who used AI, when, and what kind of data was sent?
Yes. There is a central record and someone reviews it.Only through each account’s history, with no review.No.
Question 9 of 12Do people upload files (spreadsheets, PDFs, contracts) to AI tools?
They don’t, or only in an approved tool with a rule for attachments.They do, and each person decides what can go.They do, including files with client data.We don’t know.
Question 10 of 12Has the team been trained on what can and cannot go into AI?
Yes, with recurring training.Once, or only part of the team.No.
Question 11 of 12Is someone responsible for approving a new AI tool before it is used?
Yes, with an approval process.Someone decides case by case, with no process.Nobody. Each department adopts whatever tool it wants.
Question 12 of 12If sensitive data were sent to an AI today, would the company know what to do?
Yes. There is a written incident procedure that covers AI.We would know whom to tell, but there is no written procedure.No.

0 of 12 answered

How the result is calculated

Each answer is worth 0 to 3 points. The level comes from the total, compared with the maximum possible: Initial (up to 34% of the points), Developing (35% to 59%), Structured (60% to 84%) and Advanced (85% or more). The tools question is not scored, and "the company does not develop software" removes the code question from the calculation.

The priorities are the points with the weakest answers. In a tie, whatever exposes client data comes first, then passwords and code, attachments and personal accounts.

What the result shows

The result shows the perception of whoever answered. It helps decide where to start, but it does not replace an assessment: to know what actually leaves the company, real tool usage has to be measured.

Talk to a specialist for 30 minutes.

Tell us what your company needs. You leave the call with three priorities for your environment.

Talk to a specialist

Prefer to write? Use the email contato@cyberarmor.com.br.

AI use self-assessment for your company

How it works

The questionnaire

How the result is calculated

What the result shows

Talk to a specialist for 30 minutes.