AegiTrust

B2B SaaS

Mid-market SaaS closes shadow Smart tools in 30 days

A 180-person product company discovered unmanaged Copilot and ChatGPT usage across support and engineering, with no data classes defined.

Challenge

Customer security questionnaires asked for Smart-tool inventory and evidence. Leadership had a maturity score of 34 (Emerging) and no owner for policy.

Approach

  1. Ran AegiTrust assessment with Security + Eng leads in one sitting.
  2. Unlocked remediation pack: draft acceptable-use policy and vendor inventory.
  3. Seeded control library (ISO lean + LGPD) and attested top five gaps.
  4. Enabled Monitor+ reminders every 30 days for reassessment.

Outcome

Score moved to 61 (Structured) in one month. RFP responses included board one-pager + evidence pack. No new shadow tools in the following quarter.

Frameworks: ISO/IEC 42001 (lean) · LGPD (lean) · NIST AI RMF (Govern/Map)

Start free assessment