How it works

From messy artifacts to structured governance

Three steps. One working session. A complete preliminary assessment.

Step 1

Upload everything

Drag and drop PDFs, screenshots, privacy policies, API docs, vendor contracts, architecture diagrams, Jira exports, or paste URLs and text. We accept the mess as-is.

Step 2

AI maps your risk

Our engine extracts AI systems, vendors, decision points, data flows, and human oversight gaps. It builds a governance graph and runs a rules-based risk assessment.

Step 3

Get your remediation pack

Receive a gap report, executive summary, prioritized remediation backlog, draft policies, and evidence templates — ready for your legal team to review and adopt.

What you get

Five outputs, one assessment

Everything a compliance team needs to move from "we think we use AI" to "we know our risk posture."

AI Use Case Register

Structured inventory of every AI system, vendor, automation level, data type, and stakeholder impact — extracted automatically from your artifacts.

Interactive Governance Map

Visual graph of systems, data flows, decision points, vendors, and missing controls — making invisible AI risk visible at a glance.

Preliminary Risk Assessment

Rules-based classification of each AI use case as low, medium, or probable high-risk — with confidence scores and evidence traceability.

Gap Report

Structured findings by theme: governance, privacy, transparency, accountability, human oversight, security, logging, documentation, and monitoring.

Executive One-Pager

Decision-maker summary with maturity score, top 5 risks, top 5 actions, and a clear next-step recommendation your board can act on.

Remediation Starter Kit

Prioritized task backlog, six policy draft templates, vendor checklists, and evidence templates — ready for your legal team to adopt.

Included with remediation package

Regulatory context

Built for Peru's AI framework

Peru's AI governance landscape is taking shape. Ethos maps your AI footprint against the regulations that matter now, so you're ready before enforcement catches up.

All assessments are preliminary and require qualified legal review. Ethos does not provide legal opinions.

AI

Law 31814 — Peru AI Law

Framework for the promotion and regulation of artificial intelligence in Peru.

DS

DS 115-2025-PCM — AI Regulation

Implementing regulation establishing governance, risk, and compliance obligations for AI systems.

PD

Law 29733 — Personal Data Law

Peru's data protection framework, recently updated by DS 016-2024-JUS, enforced by ANPD.

Trusted by compliance teams across Peru

Client logos shown with permission

Packages

Start with a free assessment

See your AI risk profile before you commit. Upgrade when you're ready to remediate.

Diagnostic Audit

See your AI risk posture

Free

Up to 10 artifacts

  • AI use case register
  • Governance map
  • Preliminary risk assessment
  • Executive one-pager
  • JSON + Markdown export
Start free audit
Most popular

Remediation Pack

From assessment to action plan

Custom

Based on scope and urgency

  • Everything in Diagnostic Audit
  • Prioritized remediation backlog
  • 6 draft policy templates
  • Evidence pack for audit readiness
  • Consultant review and validation
  • Technical architecture notes
Talk to an advisor

Monitoring + Registry

Ongoing governance assurance

Custom

Monthly retainer

  • Everything in Remediation Pack
  • Continuous AI system registry
  • Quarterly reassessment
  • Monthly governance summary
  • Priority support and updates
Contact us

Ready to see your AI risk profile?

Start with a free diagnostic audit. No credit card, no commitment. Upload your artifacts and get a preliminary governance assessment in minutes.

Or email us directly at bregy@alineado.lat