Skip to content

Quickstart

This quickstart takes you from signing in to your first assessed AI system. It is the fastest useful path through Gamut; later pages go deeper on each step.

You will move faster if you have one real AI system in mind to register, an internal tool, an embedded model or a vendor AI product. Have a rough idea of:

  • What it does and who uses it.
  • What data it touches.
  • Who owns it.
  • Which obligation you care about most (for example EU AI Act readiness).

Sign in at run.gamutassure.com. You land in your workspace, an environment isolated to your organisation. Everything you create stays within it. If you belong to more than one workspace, confirm you are in the right one.

Open the Registry and add your AI system. Give it a name, owner and a short description of what it does. This creates the anchor record that everything else connects to.

→ Full walkthrough: Register your first AI system.

Step 3: Complete intake and set a risk tier

Section titled “Step 3: Complete intake and set a risk tier”

Run intake for the system: capture purpose, users, data exposure, human oversight, supplier involvement and geography. Gamut uses this to help you set a risk tier, which determines the controls and frameworks that apply.

→ More detail: Intake & risk tiering.

Choose a framework, for example GTSAF or EU AI Act readiness, and assess the system against its controls, recording your rationale as you go.

→ Full walkthrough: Run your first assessment.

As you assess, raise evidence requests, attach artefacts and record any findings. Evidence and findings link back to the controls they relate to, so your assessment is defensible rather than just complete.

→ More detail: Evidence & findings.

Generate a report to see your AI inventory, risk picture, evidence quality and open findings in one place, suitable for leadership and review.

→ More detail: Reporting & exports.