Everything on this page is free to download and use. The templates are starting points – they are structured to be useful immediately but designed to be adapted to your organisation. If you want something built properly for your specific environment rather than adapted from a template, that is what our services are for.
Three interactive tools built to give you an immediate, independent picture of where your AI governance stands. Each takes a few minutes and produces a result you can act on or share.
Twelve questions across five areas: what you can see, where your data goes, whether your controls are in the path, who owns the decisions, and what happens when someone outside the organisation asks. 3 minutes
Ten questions. An instant view of what your governance framework is missing and what to prioritise first.
An independent picture of where your AI governance actually stands – and where the gaps are.
29 criteria across six areas. Work through what you know about a supplier, flag what you do not, and get a clear risk rating with a printable output.
These resources are provided free of charge. They are not a substitute for independent advice. If your situation is more complex than a template can address, get in touch.
A structured policy covering what staff can and cannot do with AI tools, data classification guidance, approval requirements, and monitoring. Editable Word document.
A one-page reference for what to do in the first hours of an AI-related incident - initial containment, escalation path, regulatory notification timelines, and evidence preservation.
A structured checklist for assessing a new AI tool before it is approved for use. Covers data handling, supplier terms, access controls, and approval sign-off.
15 pre-populated risks across ten categories, with impact and likelihood scoring, risk ratings, and treatment notes. Excel format, ready to adapt.
Black Chili is an independent security architecture and AI assurance consultancy based in the UK. We help organisations understand their actual AI exposure, build governance that functions operationally rather than just existing on paper, and maintain the independent oversight that keeps governance current as the AI landscape continues to shift.
Our work is fixed price, delivered by a named consultant, and scoped to be useful rather than to generate the next engagement. We do not sell software, platforms, or managed services. We assess, design, and advise – and we tell you what we actually think.
The resources on this page reflect the same approach. They are built to be genuinely useful, not to create dependency or to act as a sales funnel. If they are enough for your situation, use them. If they point to something that needs proper attention, you know where we are.
We will confirm scope and pricing before anything starts. No obligation, no day rates.