Total

Band

Win1

Win2

Win3

RedCount

AmberCount

GreenCount

DotB

ColB

MsgB

DotA

ColA

MsgA

DotC

ColC

MsgC

DotD

ColD

MsgD

DotE

ColE

MsgE

Thunvar Future-State Score

utm_source

utm_medium

utm_campaign

utm_content

utm_term

A_tools_accounts

B_data_pdpa

C_governance

D_people

E_opportunity

Do your staff ever paste customer details into AI tools like ChatGPT?

We have one, but our policies are out of date

Do you have a Data Protection Officer, and PDPA policies that cover AI?

Public AI chatbots (e.g. ChatGPT, Google Gemini, Claude)

AI inside work tools (e.g. Microsoft 365 Copilot, Gemini in Google Workspace, Zoom AI)

AI browser extensions and writing helpers (e.g. Grammarly, Microsoft Editor, AI sidebars)

Meeting note-takers (e.g. Otter, Fireflies, Zoom/Teams recaps)

Image, video, design or voice AI (e.g. Canva AI, Adobe Firefly, Midjourney)

AI agents that act for you (send emails, book, browse, change files or systems)

Which kinds of AI tools do your staff use? Tick all that apply.

All business accounts, on an approved list

Are those AI tools on business accounts or free personal ones?

Yes, shared with all staff and reviewed yearly

Do you have a written AI policy: what's allowed, what's not, and who decides?

No, or yes with limits, approvals and logs

Do any AI tools take actions for you, like sending emails, updating records or making payments?

Have your staff been trained to use AI safely?

We pay, but we don't know how many are used

We track every paid seat and usage-based AI bill

Thunvar Future-State Score

Know your AI risk in about 3 minutes. Free.

10 quick questions. Your score out of 100, with your band.

Anonymous. No email needed.