One row per connection.
One source account connected to one AI tool or vendor is one row. Three illustrative rows, for Meta, GA4 and Shopify, show how a filled-in register reads.
Template for recording every AI connection: which account, which tool, read or write, where the keys live and when to review it.
Template for recording every AI connection: which account, which tool, read or write, where the keys live and when to review it.
Template for recording every AI connection: which account, which tool, read or write, where the keys live and when to review it.
One source account connected to one AI tool or vendor is one row. Three illustrative rows, for Meta, GA4 and Shopify, show how a filled-in register reads.
From the account and the AI tool to the role it signs in with, read or write, personal data, where keys are stored and how to revoke it at both ends.
Six checks for every row once a quarter, from whether each connection still has an owner who works for you to anything connected that isn't in the register.
Five steps that remove a leaver's users, disconnect their rows at both ends, replace the keys they could reach and check their last two weeks of changes.
that builds the register with you from what you tell it or a list your team put together, then scores each row on the 15 checks.

PDF · 1 table
Honest note
The register only knows what someone writes in it, so add a row on the day a connection is made and review every row once a quarter. Removing a person's platform access doesn't cut off connections made through a shared user or a vendor account. Revoking still happens at both ends, in the platform and in the AI tool. This is practical guidance, not legal advice.

Shortlisted · 2025

Featured in

Trusted by









Free download