Skip to main content
The AI System Registry is available on the Pro plan and above.
The registry is a structured inventory of every AI system your organization operates or depends on — including third-party tools, internally built models, and AI features embedded in SaaS products. Keeping the registry current gives your compliance, security, and procurement teams a shared source of truth about what AI is running in your environment.

​
Registering a system

To add a new system to the registry:
  1. Navigate to Governance → Registry and select Register System
  2. Enter the system’s name, owner, and a brief description of its purpose
  3. Select one or more use case categories (for example, content generation, decision support, or fraud detection)
  4. Describe the data flows — what data the system receives, processes, and outputs
  5. Select Save to add the system
Once saved, the system appears in the registry list and becomes available for risk classification, vendor assessment linking, and incident reporting.

​
Viewing and editing systems

Select any system in the registry list to open its detail view. From there you can update any field, view its current risk classification, see linked vendor assessments, and review any incidents associated with the system. Changes to system details are recorded automatically so you have an accurate history of how each system has been described over time.

​
Retiring a system

When a system is decommissioned, select Retire System from the system detail view. Retiring a system marks it as inactive without deleting its record — past risk classifications, assessments, and incidents remain visible for audit purposes. Retired systems are hidden from the active registry list by default. Use the Show retired filter to include them.

​
Shadow AI and Discovery

If you use the Cloud Discovery integration, unrecognized AI services detected in your environment surface as shadow AI findings. You can convert any shadow AI finding directly into a registered system from the Discovery results view, pre-filling the registry form with the information already gathered.
Run a Discovery scan before populating the registry manually — it often surfaces AI services that teams are using without formal approval, which are the highest-risk entries to capture first.

​
Registry stats on the governance dashboard

The Governance dashboard shows a summary of your registry at a glance:
  • Total systems registered
  • Systems awaiting risk classification
  • Systems with active incidents
  • Systems with vendor assessments due for renewal