Skip to main content

Sample workspace

This is a read-only sample, not a sales demo. Every surface below is the same component your team uses after sign-in, loaded with a fictional AI SaaS (Vector AI) so you can see posture, not slideware. A real engagement gets its own tenant with your own data.

This is a walkthrough of the workspace we run delivery in. Downloads and bundle assembly are switched off in this sample, so the export buttons below are shown but inactive. In a live engagement every register and deliverable exports to PDF, XLSX, DOCX, or a ZIP bundle you slot into your own tools. Prefer we deliver into your stack from day one? Ask us in the engagement kick-off.

Client engagement preview · seeded sample data

Overview.

Snapshot of posture: open risks, overdue remediation, vendor tier mix.

Vector AI, bio

Sample tenant
Industry
AI / SaaS
HQ
London, UK
Employees
35 (Series A)
Data sensitivity
PII + Customer content

Business model. B2B AI copilot for regulated financial-services teams. Processes customer documents and derived embeddings on AWS eu-west-2.

MarketsUKEUNorth America
RegulatoryGDPRUK DPASOC 2ISO 27001 (in flight)
Open risks
8
2 critical
Overdue actions
1
7 open
Control effectiveness
75%
9 effective · 2 partial · 1 ineffective
Framework readiness
56%
169 in scope · 5 tracked
Open incidents
1
4 in last 90 days
Continuity coverage
83%
1 tests overdue
Policies published
11
3 in draft
Deliverables published
5
2 open requests
Vendors
11
4 critical · 3 review due
Issues open
5
1 critical
Pending proposals
1
Awaiting advisor review
Unread inbox
4

Frameworks in flight

5 tracked
SOC 2 (Trust Services Criteria)22/33 · 67%
ISO/IEC 27001:202241/88 · 47%
NIST CSF 2.018/22 · 82%
GDPR (Data protection)10/12 · 83%
EU AI Act (high-risk)4/14 · 29%

Residual risk heatmap

Likelihood × Impact
Impact 54321
2
1
2
1
1
1
1
2
L1L2L3L4L5
LowMediumHighCritical

Top residual risks

  • Vendor concentration on single AI model providerResidual 12
  • Backup restore procedure not tested in 12 monthsResidual 12
  • Model prompt injection leaks confidential contextResidual 3

Overdue remediation

  • Collect sub-processor breach SLA acknowledgementsDue 2026-07-20

Portfolio

6 active
  • 10 projects across engaged services
  • 47% average progress
  • 1 done

Risk register

11 risks
  • 8 open
  • 2 in the critical band
  • Risks → controls → issues → actions

Vendor register

11 vendors
  • 4 critical tier
  • 3 review due in 60 days
  • Concentration risk tracked

Proposals

1 pending review
  • Advisor triage for client changes
  • Portfolio, risks, vendors
  • Approved changes flow into records
Tailored walkthrough

Want this walked through against your stack?

Book a scoping session with Harold, Founder and Principal at Baseline Telemetry Advisory. Scoped to the framework or buyer requirement you have in mind, driven from the same workspace you see above.

Book a scoping sessionLive calendar · Europe/Dublin · Google Meet