For AI Products · LLM Apps · Scoring Engines · Chatbots
AI governance is taking shape.
Most AI products aren’t ready.
If your product uses an LLM, a recommendation engine, or automated scoring, the National AI Office's AIGE guidelines (voluntary) recommend risk classification, disclosure, explainability, human oversight, and incident handling — and Malaysia's proposed AI Governance Bill is under public consultation. The PDPA already applies to the personal data your product processes.
Free Website Check →
See Plans
What the law expects from you
What the PDPA requires of AI products & SaaS today, and what the AIGE guidelines recommend.
Risk declaration
The AIGE guidelines recommend a documented risk classification for every AI system. High-impact uses — credit, hiring, health, pricing — deserve the most care.
Explainability & oversight
Users affected by an automated decision should be able to get an explanation and a route to a human. Your architecture either supports that or it doesn’t.
PDPA meets your prompts
User prompts and LLM logs are personal data. Indefinite retention of chat history is a data-minimisation violation waiting to be found.
Incident reporting
Hallucinations and model failures that cause harm are AI incidents the guidelines expect you to handle — you need logging that can even detect them.
What we usually find
The three most common findings when we audit ai products & saas. All fixable — once they're visible.
No model documentation
No model card, no risk declaration, no record of training-data provenance. The AIGE guidelines recommend all three; most products have none.
Logs that never forget
Prompt and completion logs retained indefinitely with personal data inside — minimisation and retention rules apply to AI logs like any other store.
Human oversight on paper only
An escalation path that exists in the pitch deck but not in the product. We check for the mechanism, not the claim.
The profiles that apply to you
A paid AuditCore scan runs your codebase and configuration against every check in these profiles — plus the core security set.
NAIO AI Governance · 18 checks
PDPA 2024 · 36 checks
Sovereign · 15 checks
Start with the free check — see your grade in 10 seconds
No account, no card. Your public website scored against the checks that matter for ai products & saas —
then decide if the full codebase audit is worth it.
Run Free Check →
WhatsApp Us