Sign in Free diagnostic
Shadow AI detection · Compliance foundation

Shadow AI, finally revealed.
The foundation of your compliance, in 15 minutes.

Aleth automatically maps every AI tool used across your organisation, including the invisible ones, and forms the foundation of your AI Act, GDPR and DORA registers.

Start my free diagnostic → No credit card required. Sign in
No agent Read-only Hosted in the EU
Click to explore
Last scan: yesterday
Overall exposure
High

Aggregated risk indicator across 11 AI tools detected. Reflects the regulatory exposure observed (AI Act, GDPR, DORA), not a compliance verdict.

“Indicator, never verdict.” — the Aleth method
11Tools detected
2Critical
4High
9Hosted outside the EU
Watch

Aleth in one minute.

The problem

A risk you cannot see. A cost you cannot afford to ignore.

Your teams use AI tools without IT knowing: writing assistants, coding copilots, meeting note-takers. On average, an organisation uses several times more AI tools than it has approved. Every undeclared use opens a door to your sensitive data.

DORA non-compliance

Incomplete register of information: a breach the ACPR and the AMF can inspect, with regulatory sanctions.

Data leakage

Contracts, customer files and source code exposed through over-scoped OAuth permissions granted to unknown tools.

Loss of trust

From your customers, your regulators and your partners, who expect demonstrable control over your AI usage.

Start my free diagnostic →

Built for the requirements of the most regulated sectors.

Metadata only Designed for the GDPR AI Act · GDPR · DORA
The solution

Aleth reveals what nobody else can see.

The Aleth space lists every AI tool in your organisation, even the most discreet, and turns that map into usable evidence for your audits.

Complete inventory

Tools, users, permissions, hosting.

AI Health Score

An overall rating of your exposure (0–100 gauge), with each tool ranked on 5 risk levels, from Low to Critical.

Alerts on every detection

You are notified when a risky tool appears: each Critical or High-level detection triggers an email alert; the history and the monthly report keep the record.

Evidence for your audits

On-demand PDF export, scan history, and input to the DORA register of information.

Tooled compliance

A single pipeline for DORA, the GDPR and the AI Act obligations already in force.

See how it works →
How it works

A diagnostic in three steps.

1 · Connection

You connect Aleth to your Microsoft 365 or Google Workspace environment, in read-only mode. Authorisation rests with the workspace administrator: on Microsoft 365, an explicit action on their part is required before the first diagnostic. If you are not the administrator, involve them from the outset.

2 · Mapping

Aleth records the AI tools connected to your environment and the permissions they have been granted, then cross-references them with its reference base. Allow around fifteen minutes. No agent to install, no intervention from your teams.

3 · Results

You open your Aleth space: AI Health Score, inventory classified by risk level, alerts, obligations to verify, and a report exportable to PDF.

Start my free diagnostic →
Why Aleth

Three reasons to trust us with your AI visibility.

Speed

Scan in 15 minutes. Automatic detection. Continuous tracking of your environment.

Simplicity

No installation, no agent. Read-only, secure. Connects to Microsoft 365 or Google Workspace.

EU hosting

Hosted in the EU. Metadata only, never the content of your documents.

Ready to reveal your Shadow AI?

Try Aleth for free with a Shadow AI Diagnostic. Free diagnostic, no commitment, no credit card. Hosted in the EU.

Start my free diagnostic →

No credit card required.

FAQ

The last questions before you get started.

What is Shadow AI?
Shadow AI is the use of AI tools by your teams without IT or Compliance being aware of it: writing assistants, coding copilots, meeting note-takers. The consequences: regulatory risk, data leaks, potential sanctions.
How does Aleth detect my AI tools?
Aleth connects read-only to your environment (Microsoft 365, Google Workspace) and automatically maps all AI usage. No installation, no agent, no disruption for your teams.
Does Aleth really help with my DORA compliance?
Aleth automatically records the AI tools used in your organisation as third-party ICT providers: the data required for your DORA register of information (Article 28), ready to integrate, with usable evidence for your ACPR / AMF audits. Aleth provides indicators and evidence, never a legal verdict on compliance: the decision remains yours.
How much does it cost?
The Diagnostic is free, with no credit card required. Paid plans start at €590 excl. VAT/month, or €490 excl. VAT/month with an annual commitment. See pricing →
What data exactly does Aleth read?
Aleth reads metadata: the third-party applications connected to your workspace, the permissions they have been granted, and the sign-in logs. Never the content of your files, your emails or your conversations. This limit is structural: the product is not designed to access that content.
What access do you request, and can I revoke it?
The connection is read-only, through the standard authorisation mechanism of Microsoft 365 or Google Workspace. Aleth cannot modify anything in your environment. You revoke access at any time from your admin console, without going through us.
Does the diagnostic disrupt my users?
No. No agent is installed on workstations, no extension is deployed, nothing changes for your teams. The diagnostic runs from the information in your workspace, with no interaction with users.
Who must authorise the connection?
Your workspace administrator. On Microsoft 365, an explicit action on their part is required before the first diagnostic. If you are not the administrator, plan to involve them from the outset: this is what conditions the launch.

The texts Aleth relies on: AI Act, GDPR, DORA →