E-ARI / Product guide
Shadow AI discovery from SSO and expense exports
E-ARI helps identify potentially undeclared AI tools by matching application or merchant names in an imported export against a versioned catalogue. Review the matches before adding systems to the governance register.
How does the inventory scan work?
Supply an export in a supported format. The scan compares the available names with the product’s AI-tool catalogue and presents candidate matches. A person reviews them before confirming what belongs in the register.
What does a match establish?
A match identifies a catalogue candidate. It does not establish how a tool is used, whether personal data is processed, or which legal duties apply. Confirm purpose and operator context before relying on classification or obligation mapping.
What can the scan miss?
Tools absent from the catalogue, ambiguous merchant names and activity outside the supplied export may remain undiscovered. The result describes the source you provided, not a complete network or employee-monitoring inventory.
Is this the Discovery Agent?
No. The Discovery Agent is a separate model-assisted interview about organisational practice. The inventory scan uses source exports and catalogue matching. Neither is continuous surveillance of your organisation.
What happens after confirmation?
Register the confirmed system, describe its purpose, examine the applicable duties and collect supporting evidence. Shadow AI inventory access follows the published plan. Evidence connector capabilities and maturity are described separately in the connector catalogue.
Open shadow AI inventory. Compare plans, read the handbook or examine the methodology and its limits.