Is your AI use compliant?

Fifteen questions, five minutes. See which rules apply to your business and where your gaps are, with a prioritized action list. Educational, not legal advice.

Compliance checker

Answer 15 questions.
See where you stand.

Built on the rules that already apply to Canadian businesses: Law 25, PIPEDA, the voluntary AI code, and the EU AI Act for EU-facing work. Your answers stay in your browser.

About your business

Where is your business based?
Where are your customers?

Select all that apply. This drives which rules you are exposed to.

Does your AI use touch any of these areas?

Leave empty if none apply.

Your practices

AI inventory and oversight

Do you keep an up-to-date list of the AI tools your business uses and what each one is used for?
Is one person clearly responsible for privacy and for how AI is used in your business?
Do you have a written policy telling employees what they may and may not do with AI tools?

Data handling and minimization

Do you limit the personal information sent to AI tools to the minimum each task needs?
Do you have consent, or another valid legal basis, for the personal information your AI tools process?
Do you know in which country each AI provider stores and processes your data?

Automated decisions about people

Does a human review AI-assisted decisions that affect people (hiring, credit, pricing, access to services) before they take effect?
Do you inform people when a decision about them was made using automated processing?
Can a person ask for an explanation of an automated decision and have it reviewed by a human?

Transparency and disclosure

Do you tell customers when they are talking with an AI rather than a person?
Do you label AI-generated content where it could be mistaken for human work or real events?
If asked, could you show what your AI did in a specific case (logs, history, audit trail)?

Vendors and tools

Have you checked whether your AI providers train their models on your data, and opted out where needed?
Do your agreements with AI providers cover confidentiality and the protection of personal information?
Do you have a plan for responding if an AI tool leaks data or produces a harmful output?
0/15 questions answered

Want help closing the gaps?

Send us your results and we will tell you, concretely, what to put in place first. No obligation.

Crewdle Crewdle AI