Skip to content
Index / 11
LiveSecurity / AI Governance

ToolRoster

Bring workplace AI use into the open.

A shared register of which AI tools a small team may use, what data is allowed in each, and who signed off.

Free plan up to 10 tools; Starter $9 and Team $19 per workspace, monthly.

No surveillanceBuilt for small teamsExplainable, not AI-drivenAudit-ready evidence

The problem

Employees adopt AI tools faster than anyone can track, and bans just push the usage out of sight. When a client questionnaire or insurance form arrives, there is nothing to point to.

The approach

ToolRoster keeps one visible register of approved, restricted, and blocked tools with the data rules for each, routes new requests through a recorded approval, and exports the evidence on demand.

What's inside

Built in, not bolted on.

01

Tool registry with five statuses and full history

02

Per-tool data rules, from public to regulated

03

Deterministic risk scoring from recorded vendor facts

04

Request-and-approval workflow with recorded decisions

05

Versioned AI usage policy with acknowledgments

06

Readiness score and one-file evidence pack

07

Public approved-tools page, no login required

08

Append-only audit log with CSV exports

01 / 04

03From the lab

How ToolRoster gets made.

The decisions, trade-offs, and engineering notes behind ToolRoster — written as we build.

Building ToolRoster / 01

Shadow AI is a visibility problem, not a discipline problem

We spent an afternoon researching the risk of twenty AI tools and found five questions with no public answer — because they aren't facts about the tool, they're facts about your own company that nobody wrote down.

AISecurityBuild in public
Jul 22, 2026 · 6 minRead
Building ToolRoster / 02

A plain-English AI usage policy your team will actually read

The template deliberately names no AI tool, because the tool list changes weekly and the policy shouldn't. Here's the full text, the reasoning behind each section, and what we left out on purpose.

AISecurityBuild in public
Jul 23, 2026 · 7 minRead
Building ToolRoster / 03

What the EU AI Act actually asks of a 12-person team on 2 August

We sat down to write the "August deadline" post our own marketing plan called for, checked the current text first, and found the deadline had been amended out from under us. Here's what genuinely lands, what moved, and why the client questionnaire is the harder deadline anyway.

AISecurityBuild in public
Jul 24, 2026 · 7 minRead

See ToolRoster live.

Bring workplace AI use into the open.

Visit ToolRoster