How Sovereign Is Your Organization?

Take our 5-minute AI Readiness Assessment and discover your exposure. No forms, no email gate — your answers never leave this page.

Start Assessment

What you'll be asked

Do you know which AI tools your staff are currently using?Most organizations score below 40%.

Is patient data leaving your network through AI services?Most organizations score below 40%.

Do you have a written policy for AI use in clinical settings?Most organizations score below 40%.

Can you identify every third-party AI vendor with access to your data?Most organizations score below 40%.

Have you conducted an AI risk assessment in the past 12 months?Most organizations score below 40%.

Has your organization completed a Cryptographic Bill of Materials (CBOM) inventory?Most organizations score below 40%.

What 100% looks like

A fully sovereign-ready organization isn't a fantasy — it's a checklist. This is the bar the assessment measures against:

Complete AI asset inventory

Zero unauthorized AI tools

All inference runs on-premise

Full audit trail for every AI interaction

Staff trained on AI governance policy

Incident response plan for AI failures

Regular third-party AI risk assessments

Cryptographic inventory (CBOM) complete, PQC migration roadmap in motion

The assessment

Fourteen questions, three answers each — the final four measure post-quantum (PQC) readiness against finalized NIST standards. Honest answers get useful results.

QUESTION PROGRESS: 0/14

1. Do you know which AI tools your staff are currently using?

2. Can you say with certainty that patient data is NOT leaving your network through AI services?

3. Do you have a written, enforced policy for AI use in clinical settings?

4. Can you identify every third-party AI vendor with access to your data?

5. Have you conducted an AI risk assessment in the past 12 months?

6. Is every AI interaction with patient data logged and auditable?

7. Have clinical staff been trained on approved AI use and its limits?

8. Does your incident-response plan cover AI failures and AI-driven data exposure?

9. Does any of your AI inference run on infrastructure you control?

10. Is a named executive accountable for AI governance?

Quantum Readiness

Measured against finalized NIST post-quantum standards (ML-KEM, ML-DSA, SLH-DSA). Records you encrypt today must survive the quantum computers of 2035 — banks have started this migration; most hospitals have not.

11. Has your organization completed a Cryptographic Bill of Materials (CBOM) inventory of all encryption used in patient data systems?

12. Do you have a post-quantum cryptography (PQC) migration timeline aligned with NIST standards (ML-KEM, ML-DSA)?

13. Has your organization assessed 'harvest now, decrypt later' risks to long-lived patient records (PHI with 50+ year retention)?

14. Are your key exchange protocols quantum-resistant for data in transit between facilities?