Framework toolkit
Enterprise LLM Guardrails, Agentic AI & AI Vendor Risk Toolkit
52 editable templates: 34 Excel, 18 Word. Each one is listed below with page 1 and its sections.
₹9,999 incl. GST
Review cart (0)- 52 files you can edit in Word and Excel
- UPI, card or netbanking through Razorpay
Three of the 52. Open one to see its full outline.
Word38 KB
AI Acceptable Use Policy
- 1. Purpose
- 2. Scope
- 3. Approved & Prohibited Tools
- 4. Data Handling
- + 4 more
Excel452 KB
AI Skill Gap Analysis
- Cover
- Skill Assessment
- Skill Recommendations
- Recommended Read
- + 2 more
Excel10 KB
Agentic AI Risk Register
- Agentic AI Risk Register
What you get
All 52 files in this toolkit
Registers, logs and trackers3
-
Agentic AI Risk Register
A risk register for agentic AI: assistants that do not just answer but act, through connectors, MCP servers, code execution or computer use.
-
AI Tool Allowlist Blocklist RegisterThe operative record behind the restricted AI tools policy: one row per tool or route, the decision, the dated rationale, and (critically) the technical control that…
-
Shadow AI Usage RegisterA register of shadow AI: AI tools and personal accounts in use without approval.
Assessments and checklists24
-
AI Skill Gap Analysis
Formula-driven Excel register and assessment workbook (Cover, Skill Assessment, Skill Recommendations, Recommended Read) structured for audit readiness, risk scoring,…
-
-
Anthropic Vendor Security AssessmentA vendor security assessment for Anthropic / Claude: twenty questions across data use, retention, residency, security, identity, logging, subprocessors, legal, health…
-
-
Chatgpt Admin Configuration ChecklistA hardening checklist for a ChatGPT Business or Enterprise workspace: identity, roles, data controls, connectors and GPTs, logging, and rollout hygiene.
-
Chinese AI Cross Border Transfer Assessment✎ Map your flows, work the transfer analysis and record the decision.
-
Chinese AI Model Due Diligence ChecklistA due-diligence checklist for AI services from PRC-linked vendors (DeepSeek, Alibaba Qwen, Moonshot Kimi, Zhipu GLM, Baidu Ernie and others).
-
Claude for Work Admin Configuration ChecklistA hardening checklist for a Claude Team or Enterprise workspace: identity, roles, data controls, connectors and agentic features, Projects, logging and rollout hygiene.
-
Custom Gpt Actions Security Review ChecklistA pre-approval security review for Custom GPTs: ownership, instructions, knowledge files, Actions (external API calls), data flows, sharing and re-review.
-
-
Gemini Workspace Configuration ChecklistA configuration checklist for Gemini and AI features in Google Workspace.
-
Google AI Vendor Security AssessmentA vendor security assessment for Gemini and AI features in Google Workspace: twenty questions across data use, the data boundary, access, admin control, logging,…
-
Google Drive AI Data Exposure AssessmentAn assessment of Drive (and mail) exposure before an AI rollout.
-
Kimi Risk AssessmentA structured risk assessment for Moonshot AI's Kimi (consumer app, developer platform and open weights), pre-filled from the vendor's platform policy (checked Jul 2026).
-
Mcp Connector Security ChecklistA security checklist for AI connectors and MCP (Model Context Protocol) servers: the integrations that give an AI assistant access to your mail, files, tickets, repos…
-
Mistral Admin Configuration ChecklistA hardening checklist for a Mistral le Chat workspace (and the platform behind it): identity, data controls, deployment and residency choices, connectors and agents,…
-
-
Mistral La Plateforme API Security ChecklistA security checklist for using Mistral's API platform in production: keys, endpoints and regions, data terms, fine-tuning, guardrails, logging and change management.
-
Mistral Vendor Security AssessmentA vendor security assessment for Mistral AI: twenty questions across data use, retention, residency, jurisdiction, legal, assurance, identity, logging, deployment,…
-
Openai Vendor Security AssessmentA vendor security assessment for OpenAI / ChatGPT: twenty questions across data use, retention, residency, security, identity, subprocessors, legal, operations, logging…
-
Qwen Risk AssessmentA structured risk assessment for Alibaba's Qwen models, pre-filled from the vendor's cloud documentation and terms (checked Jul 2026).
-
Self Hosted Open Weights AI Security ChecklistA security checklist for self-hosting open-weight models (DeepSeek-R1/V3, Qwen3, GLM, Kimi K2, ERNIE 4.5 and others).
-
-
Plans, procedures and forms8
-
AI Prompt Leak Incident Response Procedure✎ Set your triage owners, severity levels and notification thresholds.
-
-
-
Chatgpt Rollout Governance RoadmapA rollout roadmap for governed ChatGPT use, sequencing the other templates in this toolkit into actions with priority, owner, date and status.
-
Chinese AI Risk Management RoadmapA roadmap for managing the risk of PRC-linked AI tools, sequencing the other templates in this toolkit into actions with priority, owner, date and status.
-
Claude Enterprise Rollout RoadmapA rollout roadmap for governed Claude use, sequencing the other templates in this toolkit into actions with priority, owner, date and status.
-
Gemini Rollout Governance RoadmapA rollout roadmap for governed Gemini use, sequencing the other templates in this toolkit into actions with priority, owner, date and status.
-
Mistral Rollout Governance RoadmapA rollout roadmap for governed Mistral use, sequencing the other templates in this toolkit into actions with priority, owner, date and status.
Policies and standards10
-
AI Acceptable Use Policy
✎ List your approved AI tools and the data classes that may never be pasted in.
-
-
-
-
Chinese AI Employee Awareness Policy✎ Fill in your restricted list, alternatives and reporting route.
-
-
-
Claude Projects Data Handling Standard✎ Set your visibility defaults, upload rules and review cadence.
-
-
Briefings and other documents7
-
Chatgpt DPIA✎ Describe your deployment, then work through necessity, risks and mitigations.
-
Chatgpt Edition Risk ComparisonA decision matrix comparing ChatGPT editions on the criteria that matter for security and privacy: training defaults, retention control, identity, admin controls,…
-
-
Claude DPIA✎ Describe your deployment, then work through necessity, risks and mitigations.
-
-
-
₹9,999 incl. GST
How the files fit together
A suggested order
Our suggestion, not a requirement of the standard or the law.
- 1
Find the gaps
Start with the assessment workbooks to see where you stand.
24 files: AI Skill Gap Analysis, Aleph Alpha Vendor Assessment, Anthropic Vendor Security Assessment, Baidu Ernie Risk Assessment and more
- 2
Plan the work and the response
Use the plans, procedures and forms to set owners, dates and the steps to follow.
8 files: AI Prompt Leak Incident Response Procedure, AI Tool Exception Approval Request Form, AI Vendor Exit Strategy Plan, Chatgpt Rollout Governance Roadmap and more
- 3
Approve the policies
Edit the policies to match how you work, then get them approved.
10 files: AI Acceptable Use Policy, AI Data Localisation Policy, AI Sovereignty Requirements Policy, Chatgpt Acceptable Use Policy and more
- 4
Keep the records
Keep the registers and logs up to date as evidence for an audit or a review.
3 files: Agentic AI Risk Register, AI Tool Allowlist Blocklist Register, Shadow AI Usage Register
- 5
Brief your leadership
Use the briefing documents to explain the work to decision makers.
7 files: Chatgpt DPIA, Chatgpt Edition Risk Comparison, Chatgpt Employee Data Handling Guide, Claude DPIA and more
Questions
Before you buy
What exactly do I get?
52 editable files (34 Excel, 18 Word). Every file is listed on this page with its file name, size and number of sections.
How are the files delivered?
Digitally, after your payment is confirmed: we email download links to the address you gave at checkout. Each link works for 2 hours; you can ask for a fresh one from My purchases. Nothing is shipped.
How do I pay?
Through Razorpay, by UPI, card or netbanking.
Is GST included?
Yes. The price includes GST. To get a GST invoice, email [email protected] with your billing name, address and GSTIN.
Are these official documents of the standard body or regulator?
No. They are templates supplied by CynorSense Solutions Pvt. Ltd. They are not issued or endorsed by any standard body or regulator, and they are not legal advice. Using them does not by itself make an organisation compliant or certified.