# tool·runs in your browser·nothing is sent or stored·data checked Nov. 15, 2026
AI risk register builder
Tick the ways your organization uses AI. You get the risks that apply, with controls to start on and questions for vendors. Add owners and status, then export it as a spreadsheet or Markdown.
Your register will appear here.
| ID | Risk | Owner | Status | Notes |
|---|
What the register contains
Each row is one entry from the risk register. A risk appears when at least one of your ticked uses is linked to it. One risk, attackers using AI against you, appears for every organization. The "why" line under each risk shows which of your answers brought it in.
Controls come from OWASP, the MCP specification, NIST and FBI guidance, cited on each risk's page. Vendor questions are our own suggestions. Neither is a complete control set, and nothing here is an assessment of your systems.
Privacy
The builder runs entirely in your browser. Your answers, owners and notes are not sent to us or stored anywhere; they are lost when you close the page, so export first. The page address keeps the uses you ticked, so you can bookmark or share it without the owners and notes.
Limits
Which risk applies to which use is our editorial judgment, made from the documented cases and the framework text. Treat the output as a starting list for your own review, not a finished risk assessment.