Free AI Governance Maturity Scorecard
Find out how mature your AI governance is, scored against the GOVERN function of the NIST AI Risk Management Framework 1.0 and the management-system requirements of ISO/IEC 42001. Answer five questions, generate a scorecard that names your gaps and what to do next, then download it as Word or PDF. It is free and needs no sign-up. Your answers are processed securely to write the scorecard and are never stored, sold, or used for training.
AI governance maturity is how far an organization has moved from ad-hoc AI use to a managed practice: a written policy, a system inventory, a risk process, human oversight, and trained staff. This free tool scores those five signals against the NIST AI RMF 1.0 GOVERN function and ISO/IEC 42001, tells you where you stand and what to fix next, and lets you download the result as Word or PDF, with no paywall and no sign-up.
Your AI governance
Tell us where your organization stands on five governance signals. You get a scored maturity scorecard that names your gaps and the next steps, ready to download as Word or PDF.
Organization
Maturity questions
Answer each one honestly. "Partial" means it exists but is not complete or consistently applied.
Your scorecard will appear here. Answer the questions on the left and select Generate scorecard.
How the AI governance maturity scorecard works
Answer five questions
Enter your organization and industry, then say whether you have a written AI policy, a system inventory, a risk process, human oversight, and staff training.
Generate your scorecard
The tool rates your answers and writes a scorecard worded against the NIST AI RMF 1.0 GOVERN function and ISO/IEC 42001, with the gaps to close next. Results come back in seconds.
Download and act
Export the scorecard as a PDF or an editable Word file, work through the recommended actions, and validate each one with your own review.
Free, private, and built on NIST AI RMF 1.0 and ISO/IEC 42001
Most maturity assessments sit behind a lead form or keep a copy of what you enter. This one asks for no sign-up and keeps nothing. Scoring your answers needs a language model, so they are sent to our server and processed there, then discarded. The scorecard is worded to line up with the GOVERN function of the NIST AI Risk Management Framework 1.0 and the management-system requirements of ISO/IEC 42001.
We built this from our own AI governance programme, not from a summary of the standard: see BlockSurvey's AI Policy for how we hold ourselves to the same signals this scorecard checks.
Processed, never kept
Your answers are processed securely to write the scorecard and are never stored, sold, or used for training. Keep the form to organization-level details and leave secrets, personal data, and PHI out.
No account required
No sign-up and no email wall. A fair-use rate limit is the only thing standing between you and the tool.
Free, real download
The complete scorecard as an editable Word file or PDF at no cost, not a watermarked sample.
What the scorecard includes
A structured scorecard generated from your five answers, worded against the NIST AI RMF 1.0 GOVERN function and ISO/IEC 42001:
- An overall maturity read on where your AI governance stands today.
- A rating for your written AI policy, mapped to the GOVERN function.
- A rating for your AI system inventory and how completely it is kept.
- A rating for your AI risk assessment process against ISO/IEC 42001.
- A rating for human oversight of consequential AI decisions.
- A rating for staff AI training and awareness across the organization.
- The highest-priority gaps to close first, in plain language.
- Concrete next steps you can take without buying anything.
- How the result maps onto NIST AI RMF and ISO/IEC 42001 expectations.
- An advisory legal notice added to the end of the document.
Built for every team working with AI
Whether you ship models or just bought your first AI tool, knowing your governance maturity is what lets you plan the next quarter and answer a customer, an auditor, or a regulator. This scorecard gives you a dated read on where you stand, and it pairs well with an AI survey platform when the data you feed those systems comes from people.
Compliance & privacy teams
See your AI governance gaps before an auditor or a customer does.
Legal & risk
Get a framework-aligned read on maturity to prioritise, not a generic checklist.
Product & engineering
Know which governance basics to put in place before you ship more AI.
Researchers & data teams
Check whether oversight and risk process keep pace with what you build.
Startups adopting AI
Get a baseline you can point to when enterprise buyers ask how you govern AI.
Leadership & boards
See where the organization stands on AI governance in one page.
Your scorecard just flagged data protection as a governance signal.
Governance maturity holds up only if the tools you collect data with respect it too. BlockSurvey is an AI survey platform, encrypted end to end, with a published AI policy you can cite in your own assessment, so responses are never sold, mined, or used to train models.