Local pilot demo

AssureDeck Review Workspace

A focused workspace for turning one active AI or MCP security review into buyer-ready evidence, reusable questionnaire answers, and a clear gap list.

Validation status$0 confirmed net profit

This is a sales/demo surface only. It should not be treated as a proven SaaS product until paid pilots validate the workflow.

MVP workflow

What the app does first

The first version exists to close and deliver paid pilots, not to automate every security workflow. Each module answers a buyer-money question.

Review Intake

Pilot-ready

20 min

Capture buyer deadline, questionnaire source, AI workflow scope, account value, and decision owner before any custom work starts.

Evidence Vault

Manual MVP

12 sources

Collect policies, trust-center pages, model/provider settings, data flow notes, logging screenshots, and approval rules.

AI/MCP Matrix

Core

8 controls

Map each model, tool, permission, customer-data path, prompt-injection control, human approval gate, and audit trail.

Buyer Pack

Export

PDF + CSV

Produce reusable answers, evidence links, unsupported-claim warnings, and a prioritized gap list for the buyer review.

Evidence vault

One review becomes a structured evidence system.

Evidence item	Owner	Status	Buyer-ready note
AI provider and region	Security	Ready	Model route, region, retention, and training-use position.
Customer-data classes	Product	Review	Data classes listed; admin retention screenshot still needed.
Agent tool permissions	Engineering	Ready	Read/write actions and approval gates are mapped.
Prompt-injection testing	Engineering	Gap	Direct tests exist; indirect email and HTML payload tests are missing.
Audit reconstruction	Security	Gap	Internal logs exist; customer-facing export is not ready.

Questionnaire engine

Reusable AI security answers with evidence discipline.

What customer data reaches the model?

Ready

Map data classes, source systems, masking, retention, and model-provider path.

Can the agent take external actions?

Ready

Separate read, draft, internal write, and external action permissions with approval rules.

Is data used for training?

Review

Answer only from approved provider contract, DPA, and subprocessor documentation.

Can an incident be reconstructed?

Review

Show log sources, event ids, actor, tool call, prompt context, and approval trail.

Output

Exportable buyer pack

The paid pilot output is a buyer-facing packet: executive summary, AI workflow inventory, control matrix, answer bank, evidence index, unsupported claims, and remediation plan.

Pack readiness74%

High enough to unblock a review conversation, not high enough to claim certification.

Top blockerAudit export

Buyer wants reconstructable logs for tool calls and approvals.

Next commercial actionPaid pilot

Move forward only when a live review or procurement need exists.

Revenue validation

The application earns the right to exist through paid reviews.

Gate 1

Buyer has an active AI security review in the next 30-60 days

Gate 2

Buyer confirms paid scope or asks for procurement/order form

Gate 3

Pilot produces reusable evidence for more than one future deal

Gate 4

Maintenance plan is justified by recurring reviews or regulated customers