Inventory baselineAI System Inventory Template
11-column Excel schema for cataloging AI systems, owners, use cases, vendors, data categories, and evidence gaps.
Download by job to be done
Pick the artifact closest to the decision you need to document this week. Each card shows the operational use case, format, and natural paid-product route.
1. Discover AI systems and shadow AI
Use these when no reliable AI inventory exists or when unmanaged browser tools, plugins, agents, or vendor AI features may already be in use.
Inventory baseline
Shadow AIShadow AI Discovery Workbook
Find unmanaged AI use across teams, browser tools, vendors, plugins, agents, and informal workflows.
OpenClaw inventoryOpenClaw Shadow Deployment Inventory
Register known and suspected OpenClaw deployments with environment classification, data sensitivity, ownership, and status.
2. Set AI use rules and approval decisions
Use these when employees, developers, or business teams need clear boundaries before broader control mapping begins.
Policy starterAI Acceptable Use Policy Template
Five-section Word template covering scope, acceptable uses, prohibited uses, data handling, reporting, and enforcement.
Skill approvalOpenClaw Skill Approval Decision Log
Record formal approval decisions for skills, connectors, and MCP integrations using approval, sandbox, hold, or reject classifications.
Vendor riskAI Vendor Due Diligence Pack
Screen AI vendors, copilots, agents, and embedded AI suppliers before approval, procurement, or renewal sign-off.
3. Prepare regulatory and review evidence
Use these when the next problem is impact evidence, annual review readiness, consumer-rights handling, or deployer obligation tracking.
Impact evidenceFRIA Lite + Colorado Consumer-Rights Forms
Document AI impact, consumer-rights handling, annual-review readiness, and evidence records for Colorado-style deployer obligations.
Colorado deployerColorado Deployer's Compliance Toolkit
Track high-risk determination, deployer obligations, annual-review readiness, and status records for Colorado AI Act preparation.
Security readinessOpenClaw Security Readiness Action Plan
Track containment actions across control areas for OpenClaw deployments and route technical gaps into governance evidence.
4. Control agentic AI and OpenClaw runtime risk
Use these when autonomous or semi-autonomous agents can call tools, retain memory, trigger workflows, connect to MCP servers, or require shutdown evidence.
Agentic incidentAgentic AI Incident Log + Shutdown Playbook
Log agent incidents, classify autonomy failures, document kill-switch decisions, and retain rollback evidence.
Operating modelAgentic AI Governance Operating Model One-Pager
Define governance layers for AI agents, MCP servers, tools, skills, override, kill-switches, evidence, and escalation.
OpenClaw playbookAgentic AI & OpenClaw Security Playbook
Track OpenClaw discovery, agentic risk register entries, OWASP mapping, and AI policy addendum actions.
5. Brief leadership and preserve incident evidence
Use these when the audience is management, board, legal, risk, compliance, or security leadership rather than the individual system owner.
Board reportingAI Board Reporting Sample Deck
Brief leadership on AI inventory, risk posture, regulatory exposure, agentic AI risk, and 90-day governance decisions.
Incident referenceOpenClaw Incident Response Quick Reference
Use a five-step field guide for containment, evidence preservation, impact assessment, escalation, and remediation.
Next stepACT-2 Professional Evidence System
Use ACT-2 when free artifacts need to become a connected implementation evidence pack across governance, risk, vendor, agentic AI, and reporting workflows.
Use free downloads as the first record, not the whole system.
A standalone template helps you start. It does not create ownership discipline, cross-framework mapping, recurring review, vendor evidence, board cadence, or agentic AI escalation by itself.