Your first hour: from sign-up to your first assessed system
A practical sequence for your first session, so you see real results quickly.
You don't need to finish everything at once. This order gets you to something useful in about an hour.
1. Add one real AI system (10 minutes)
Pick a system that matters: something customers or staff rely on. Go to AI systems → + Add AI system, choose its sector and fill in what it is for. Be specific about the purpose ("ranks job applicants for interview") because the risk tier depends on it.
Not sure what you use? Start with Discover AI: upload a week of web proxy or DNS logs and V77 lists the AI services your staff actually use.
2. Classify it (10 minutes)
Open the system and choose Classify risk. Answer the questions honestly. If the answer is "high-risk", that's not bad news: it tells you exactly which obligations apply. See Classify risk.
3. Open the control assessment (20 minutes)
Classifying creates a control assessment with the controls that apply. Open a few, read what each requires, and mark the ones already in place. You can only mark a control Implemented once evidence is uploaded, so start with ones where you already have a document or screenshot.
4. Invite one colleague (5 minutes)
Compliance is a team job. In Settings, invite someone as a Reviewer so they can approve your work. See Roles and permissions.
5. Look at what's left (15 minutes)
Run a Gap analysis for the system. It lists what's missing, ranked by importance. Turn the top two or three into findings with an owner and a due date.
After the first hour
- Add the rest of your systems, or connect a discovery source.
- Turn on the notifications you want under Notifications.
- Schedule a re-assessment for each high-risk system.