AI Tool Risk Directory

Where does your data go when employees use AI?

Independent profiles of the AI tools showing up inside organizations: whether they train on your inputs, how long they retain them, and which certifications actually apply — verified against each vendor's published policies, with a dated changelog when anything changes.

Risk level

AI Chatbots & Assistants

Coding Assistants

Amazon Q Developer

Amazon Web Services

High risk

AWS's AI coding assistant and agent for IDEs, the CLI, and the AWS console, with completions, chat, and code transformation tied into AWS accounts.

Read the risk profile

Bolt.new

StackBlitz

High risk

Browser-based AI app builder from StackBlitz that generates, runs, and deploys full-stack JavaScript applications from prompts, popular with founders and rapid prototypers.

Read the risk profile

Cursor

Anysphere

Medium risk

AI-first code editor that sends repository context to hosted models for completions, chat, and multi-file agentic edits.

Read the risk profile

Devin

Cognition

Medium risk

Autonomous AI software engineer that plans and executes multi-step development work with its own shell, browser, and repository access, sold to teams and enterprises.

Read the risk profile

GitHub Copilot

GitHub (Microsoft)

High risk

AI pair programmer integrated into editors and the GitHub platform, offering code completion, chat, and agentic coding workflows.

Read the risk profile

JetBrains AI Assistant

JetBrains

Low risk

AI features built into JetBrains IDEs (IntelliJ, PyCharm, Rider, and others), including the AI Assistant and the Junie coding agent, routing requests through JetBrains AI to selected model providers.

Read the risk profile

Lovable

Lovable (Stockholm)

High risk

AI app builder that turns natural-language prompts into full-stack web applications, typically deployed on Supabase backends, aimed at founders and non-specialist builders.

Read the risk profile

OpenAI Codex

OpenAI

Medium risk

Autonomous software engineering agent from OpenAI that connects to private repositories to write, test, and propose code changes, available through ChatGPT plans and the API.

Read the risk profile

Replit

Replit

High risk

Cloud IDE with an AI agent that writes and deploys applications, storing code and running workloads in Replit's cloud.

Read the risk profile

Tabnine

Tabnine

Low risk

AI code assistant built around code privacy: completions and chat with no training on customer code, ephemeral processing, and self-hosted or air-gapped deployment options.

Read the risk profile

v0

Vercel

High risk

Vercel's generative UI and app builder that turns prompts into React/Next.js code and deploys it on the Vercel platform.

Read the risk profile

Windsurf

Cognition (formerly Codeium)

Medium risk

Agentic AI code editor (formerly Codeium) offering completions, chat, and the Cascade multi-file agent, now owned by Cognition after a turbulent 2025.

Read the risk profile

Meeting Assistants & Transcription

Legal AI

Clio Duo / Manage AI

Clio (Themis Solutions)

Medium risk

AI assistant built into Clio Manage, the dominant solo and small-firm practice management platform, answering questions and drafting from the firm's own matter data.

Read the risk profile

CoCounsel

Thomson Reuters (ex-Casetext)

Medium risk

Thomson Reuters' professional AI assistant, delivered inside Westlaw Precision for legal work and as CoCounsel Tax, Audit & Accounting for advisory practices.

Read the risk profile

Harvey

Harvey AI

Low risk

Legal AI platform for law firms and in-house teams: research, drafting, document review, and workflow automation built on foundation models.

Read the risk profile

Lexis+ AI / Protégé

LexisNexis (RELX)

Medium risk

LexisNexis' generative AI research and drafting assistant, now sold as Lexis+ with Protégé, grounded in the Lexis primary-law and Shepard's citation database.

Read the risk profile

MyCase IQ

MyCase (AffiniPay / 8am)

High risk

Generative AI features (document summarization, drafting, text editing, search) embedded in the MyCase practice management platform for small firms, part of AffiniPay's 8am IQ initiative.

Read the risk profile

Paxton AI

Paxton AI

Medium risk

Budget-priced all-in-one AI legal assistant (research, drafting, document review) marketed to solo practitioners and small firms.

Read the risk profile

Relativity aiR

Relativity

Low risk

Generative AI review suite (aiR for Review, aiR for Privilege, aiR for Case Strategy) built into RelativityOne for e-discovery document and privilege review at scale.

Read the risk profile

Smokeball AI / Archie

Smokeball

Medium risk

AI features across the Smokeball practice management suite for small firms (family law, personal injury, conveyancing), including the Archie matter assistant, intake, billing narratives, and communication summaries.

Read the risk profile

Spellbook

Rally Legal (Spellbook)

Medium risk

Word-embedded contract drafting and review copilot aimed at transactional lawyers at small and mid-size firms, built on OpenAI and Anthropic models.

Read the risk profile

Vincent AI

vLex (part of Clio)

Medium risk

Legal research and workflow AI built on the vLex/Fastcase global law database, widely available to solo and small-firm lawyers through bar association benefits, now owned by Clio.

Read the risk profile

Westlaw AI-Assisted Research

Thomson Reuters

High risk

Generative AI research feature inside Westlaw Precision that answers legal questions in prose with citations drawn from the Westlaw database.

Read the risk profile

Accounting & Tax AI

Blue J

Blue J Legal (Toronto)

Low risk

Generative AI tax research platform for tax practitioners, answering US and Canadian tax questions with citations to primary authorities.

Read the risk profile

Botkeeper

Botkeeper

Medium risk

AI-plus-human bookkeeping automation for accounting firms, connecting to client general ledgers and bank feeds to automate transaction categorization and close work.

Read the risk profile

DataSnipper

DataSnipper

Low risk

Excel-embedded intelligent automation platform for audit and finance teams that extracts and cross-references evidence from client documents inside the workpaper.

Read the risk profile

Fieldguide

Fieldguide

Medium risk

AI-native audit and advisory platform for CPA firms where AI Field Agents perform engagement work such as controls testing and evidence review under practitioner supervision.

Read the risk profile

Intuit Assist

Intuit (QuickBooks)

Medium risk

Generative AI assistant embedded in QuickBooks Online that drafts invoice reminders, categorizes transactions, and surfaces financial insights for businesses and their accountants.

Read the risk profile

Just Ask Xero (JAX)

Xero

Medium risk

Xero's agentic AI companion that answers questions and performs accounting tasks over client ledgers, in beta for accountants and bookkeepers.

Read the risk profile

Karbon AI (Kai)

Karbon

Medium risk

AI assistant built into Karbon's practice management platform for accounting firms, summarizing and drafting across the firm's client emails, tasks, and work items.

Read the risk profile

TaxGPT

TaxGPT Inc.

Medium risk

AI tax research copilot for accountants and tax professionals: cited tax answers, document analysis, memo drafting, and autonomous workflow agents.

Read the risk profile

Vic.ai

Vic.ai

Medium risk

Autonomous accounts payable platform that ingests invoices, learns a customer's coding patterns, and processes approvals with minimal human review.

Read the risk profile

Healthcare AI & Medical Scribes

Abridge

Abridge AI

High risk

Enterprise ambient clinical documentation platform, deeply integrated with Epic, that records clinician-patient conversations and generates structured notes.

Read the risk profile

Doximity GPT (Doximity Ask)

Doximity

Medium risk

Free AI writing and clinical-answer assistant (renamed from Doximity GPT to Doximity Ask) bundled into the professional network used by a large majority of US physicians.

Read the risk profile

Freed

Freed AI

Medium risk

Self-serve ambient AI medical scribe that listens to patient visits and drafts clinical notes, aimed at solo clinicians and small practices.

Read the risk profile

Heidi Health

Heidi Health (Melbourne, Australia)

Medium risk

AI medical scribe with a free tier, built by an Australian company and marketed to clinicians in the US, Canada, the UK, and Australia.

Read the risk profile

Microsoft Dragon Copilot (Nuance DAX Copilot)

Microsoft (Nuance)

Medium risk

Microsoft's enterprise ambient clinical AI (successor to Nuance DAX Copilot) that records patient encounters and drafts documentation inside major EHRs.

Read the risk profile

Nabla

Nabla Technologies

High risk

Ambient AI assistant that transcribes clinician-patient encounters and drafts notes, used by dozens of health organizations and strong in telehealth settings.

Read the risk profile

OpenEvidence

Xyla Inc.

High risk

Free, ad-supported AI clinical question-answering tool that reportedly a majority of US physicians now use for point-of-care evidence lookups.

Read the risk profile

Scribeberry

Scribeberry Inc. (Canada)

Low risk

Canadian AI medical scribe and documentation assistant used by tens of thousands of providers, with Canadian data residency and broad Canadian EMR alignment.

Read the risk profile

Suki AI

Suki AI Inc.

Low risk

Enterprise AI voice assistant and ambient scribe for clinicians, integrated with major EHRs including Epic, Cerner/Oracle Health, athenahealth, and Meditech.

Read the risk profile

Tali AI

Tali AI (Toronto, Canada)

Low risk

Toronto-built AI medical scribe and voice assistant with native integrations across major Canadian EMRs, including the TELUS Health suite (PS Suite, Med Access, CHR).

Read the risk profile

Education & Student Safety AI

Brisk Teaching

Brisk Teaching

Medium risk

Chrome extension for teachers that layers AI onto Google Workspace and the sites they already use — generating feedback on student documents, creating materials, and replaying how a student's draft was written.

Read the risk profile

Character.AI

Character Technologies

Critical risk

Consumer companion-chatbot platform where users chat with user-created AI personas; it has no education product, but is one of the most heavily used AI apps among teenagers.

Read the risk profile

Gaggle

Gaggle.Net

High risk

District safety-monitoring service that uses AI plus human reviewers to scan student email, documents, and files in Google Workspace and Microsoft 365 for signs of self-harm, violence, and abuse.

Read the risk profile

GPTZero

GPTZero

High risk

Standalone AI-writing detector with a free web checker and paid tiers, widely used by individual teachers and professors to screen student work for AI generation.

Read the risk profile

Khanmigo

Khan Academy

Medium risk

Khan Academy's AI tutor and teaching assistant: a student-facing guide that coaches rather than answers, plus teacher tools, offered to families and through district partnerships.

Read the risk profile

MagicSchool AI

MagicSchool AI

Medium risk

Teacher-facing AI platform offering 80+ tools for lesson planning, differentiation, IEP drafting, and communication, plus a student-facing mode, widely adopted across K-12 districts.

Read the risk profile

SchoolAI

SchoolAI

Medium risk

Classroom AI platform where teachers create monitored, student-facing chat experiences (Spaces) with live dashboards, alongside teacher assistant tools, sold to K-12 schools and districts.

Read the risk profile

Snapchat My AI

Snap Inc.

High risk

AI chatbot pinned to the top of every Snapchat user's chat feed, including teen accounts; not an education product, but present by default on the app most students already use.

Read the risk profile

Turnitin AI Writing Detection

Turnitin

High risk

AI-writing detection feature built into Turnitin's plagiarism-checking suite, producing a percentage score of a submission estimated to be AI-generated, used by thousands of schools and universities.

Read the risk profile

Productivity & Writing

AI Search

Image, Video & Voice Generation

AI Platforms & Model Hubs

Every tool here is already inside someone's organization.

Sanitized AI shows you which ones are inside yours — and redacts sensitive data from prompts before it leaves.

Get a demo