Bothridge Advisory

Most organisations are using more AI than they realize. Some AI is built into the product. Some is buried inside vendor tools. Some is being used informally by teams for support, sales, engineering, marketing, or operations. Before you can assess AI Act exposure, privacy risk, vendor risk, or internal governance gaps, you need one thing first: a clear AI inventory. The fastest way to build an inventory is a workshop with the right people in one room. Who should be there Bring

Your AI inventory is the foundational document for everything else. Without it, risk classification is guesswork. Twelve fields to capture for every AI system: Field What to capture Why it matters System name Internal name and vendor name if applicable Disambiguation across teams Owner Named individual (not role) Single point of accountability Purpose What it does, in one sentence Plain-English summary for non-technical reviewers Data inputs What data goes in (categories, sou