Nothing here is gated. The print action produces a paginated PDF through your browser — one sheet per page, with the illustrative marking retained.
Same sections, definitions and wording as the report Moustr generates. Figures model an organisation of 1,400 people and reconcile with the Sprawl Simulator on this site. Tool and person names are fictional, no customer data appears here, and no organisation described in it is real.
AI and Shadow-AI Governance Report
A point-in-time record of what is running, what has been reviewed, and what still needs a decision — with the evidence behind every finding.
01 · EXECUTIVE SUMMARY
Discovery is working. Governance is the gap.
135 AI tools are catalogued for this organisation, spanning Moustr’s shared catalogue and the organisation’s own additions. Of these, 117 were actually seen in the last 30 days. 22 have an owner and a documented decision on record — the other 113 do not.
| GOVERNANCE STATUS OF THE DISCOVERED ESTATE | TOOLS |
|---|---|
| Approved | 14 |
| Under review | 6 |
| Tolerated | 2 |
| Not yet assessed | 113 |
| WHAT KIND OF VALUE THE ESTATE DELIVERS | TOOLS |
|---|---|
| Productivity gain | 11 |
| Operational efficiency | 8 |
| Quality / risk reduction | 5 |
| Capability enablement | 4 |
| Cost / money savings | 3 |
| Reduced workload / avoided hiring | 2 |
| Revenue growth / competitive differentiation | 1 |
How to read this report. Every figure here is pulled live from Moustr’s discovery and governance records for this organisation at the time of generation — not sampled or estimated. Risk levels are an automatic screening signal, not a legal determination; actual EU AI Act classification depends on how a tool is used, by whom, and in what role. See section 04 for the evidence behind each catalogue finding.
AI GOVERNANCE REPORT · 30 SEP 2026 · CONTINUED
02 · ATTENTION POINTS
8 things worth a decision
Ranked by real impact — usage volume for ownership gaps, days until due for contracts — not by discovery date.
| # | ATTENTION POINT | DUE |
|---|---|---|
| 01 | FieldReport.ai’s contract expired 12 days agoRecorded contract reference lapsed on 18 Sep 2026 with no renewal on file. | 12d overdue |
| 02 | ChatWise has no assigned owner3,412 detections in the last 30 days with no owner or purpose on file. The single most-used tool in the estate. | This quarter |
| 03 | HRScreen AI is classified high risk with no agreement on file418 detections in the last 30 days. No data-processing agreement is recorded for this tool. | This quarter |
| 04 | BudgetBot’s contract expires in 21 daysRenewal window closes 21 Oct 2026. | 21 days |
| 05 | CallSense has no assigned owner1,205 detections in the last 30 days with no owner or purpose on file. | This quarter |
| 06 | NoteTaker Pro has no assigned owner644 detections in the last 30 days with no owner or purpose on file. | This quarter |
| 07 | LegalDraft AI is classified high risk with no agreement on fileNo recorded usage yet. No data-processing agreement is recorded for this tool. | This quarter |
| 08 | 84% of the discovered estate has never been reviewed113 of 135 tools have no governance record at all — no owner, no risk classification, no purpose on file. | Ongoing |
03 · ACTION ITEMS
Linked directly to the points above
Each row traces back to an attention point — no action here without a finding behind it.
| REF | ACTION | OWNER | DUE |
|---|---|---|---|
| §1 | Renew or formally retire the FieldReport.ai contract — currently trading without agreement cover. | Marta Jansen | 12d overdue |
| §2 | Assign an accountable owner to ChatWise and record its purpose of use. | Unassigned | This quarter |
| §3 | Obtain and record a data-processing agreement for HRScreen AI before continued use is signed off. | Pieter de Wit | This quarter |
| §4 | Confirm the BudgetBot renewal before the window closes. | Sofie Lindqvist | 21 days |
| §5 | Assign an accountable owner to CallSense and record its purpose of use. | Unassigned | This quarter |
| §6 | Assign an accountable owner to NoteTaker Pro and record its purpose of use. | Unassigned | This quarter |
| §7 | Obtain and record a data-processing agreement for LegalDraft AI before continued use is signed off. | Unassigned | This quarter |
| §8 | Set a review cadence for the remaining ungoverned tools, starting with whichever carry real usage. | Unassigned | Ongoing |
AI GOVERNANCE REPORT · 30 SEP 2026 · CONTINUED
04 · EVIDENCE AND METHODOLOGY
How Moustr knows what is in this report
A sample of the underlying research trail — not a summary claim, the actual sources checked.
| TOOL | SOURCES CHECKED | WHAT THEY SHOW |
|---|---|---|
| HRScreen AI | Vendor product documentation · vendor privacy notice | Ranks and shortlists job applicants; candidate data is processed by the vendor. |
| ChatWise | Vendor trust page · public terms of service | General-purpose chat assistant; prompts may be retained unless a business plan is used. |
| FieldReport.aiembedded provider: a third-party model | Vendor release notes · vendor product documentation | AI report drafting added to an existing field-service product in a minor release. |
| # | METHOD |
|---|---|
| 01 | Network and device activity is matched against a catalogue of known AI tools and VPN services, never by inspecting content. |
| 02 | Never-seen services are triaged and researched before they reach the catalogue. |
| 03 | Every classification is reviewed by a human before it is added to the shared catalogue; nothing here was auto-approved. |
| 04 | Ownership, risk classification and DPA status are entered by this organisation’s own admins — Moustr never assumes them. |
This report reflects Moustr’s discovery and governance records as of the date above. It is a decision-support tool, not a compliance certification, and does not constitute legal advice.
The Estate Report
The working report for IT and security — the state of the estate, the triage queue, where confirmation is stuck and coverage achieved.
Open the sample → SAMPLE 3 OF 3The Contractual View
For legal and procurement — the compliance score with its formula, vendor risk exposure, the contract timeline and the decisions due.
Open the sample →