Free offer · Metadata only · NDA first
Free AI usage and risk audit
What you get:A one-week audit of which AI tools, models and agents are in use in your organisation and where the risk sits, run through Swfte Nexus on usage metadata only, after we have agreed an NDA. We also give you a free gateway key through Swfte Connect. Design-partner terms are available on request.
Two parts, both free
One-week AI usage and risk audit
Nexus is designed to surface the agents, model providers and non-human identities in use, including ones nobody registered. Over one week it records usage metadata for the sources we agree, so you start from what is actually running rather than from a survey.
A free gateway key through Connect
Connect puts model calls behind one endpoint with usage and cost tracked per key. Use the key to route one workload through the gateway and compare it with what the audit found. Limits and fair-use terms for the free key are <free key limits - founder to fill>.
What the audit covers, and what it does not
Metadata can show a lot about how AI is used, and it cannot show everything. Both lists matter, so read both before you decide whether this fits.
It covers
- Which AI tools, models and providers are in use, including ones nobody registered.
- Which agents are running, which tools they can call and which non-human identities they use.
- How often each is used, by which teams or accounts, and how that changes across the week.
- Where spend goes, for traffic that passes through a gateway you choose to connect.
- Where an owner, an approval rule or a policy is missing, as far as metadata can show it.
It does not cover
- The content of prompts, responses or documents. The audit does not read or store them.
- Usage outside the sources you connect, such as personal devices or tools you did not include.
- Activity that happens outside the audit week. One week can miss monthly or quarterly cycles.
- A legal, regulatory or compliance assessment, a penetration test, or a certification of any kind.
- A complete inventory. It is a view of what the metadata showed, and it will miss what it cannot see.
Swfte provides technical controls, governance mechanisms and evidence that an organisation can use in its own reviews. The exact posture depends on your use case, jurisdiction, deployment and configuration. For what Swfte does and does not claim today, see the trust centre.
How it works
01Request the audit
Send your name, work email and company with the form below. Please do not include prompts, customer data or credentials.
02Sign an NDA
We reply by email to agree an NDA first. No usage data is shared until it is signed.
03Agree the metadata sources
Together we choose which sources the audit reads and what is excluded. How metadata is collected for each source is <collection method per source - founder to fill>.
04One week of observation
Nexus records usage metadata for the agreed sources for one week. You keep control of what is connected and can stop at any point.
05Findings review
We walk through what the metadata showed, what looks risky, and what you would need in place to evidence control. The decision about what to do next stays with you.
Request the free audit
Contact details only. We reply by email to agree an NDA before any usage data changes hands.
Frequently asked questions
What is the free AI usage and risk audit?
It is a one-week look at which AI tools, models, providers and agents are in use in your organisation, how often, by which teams or accounts, and where the gaps in ownership, access and policy are. It is run through Swfte Nexus on usage metadata only. It is free, and you agree an NDA with us before anything is shared.
Do you see our prompts, responses or customer data?
No. The audit works from metadata: names of tools, models and providers, counts, timings, accounts and the permissions an agent holds. It does not need the content of prompts or responses, and the request form asks you not to send any. If a source you want included cannot be read without exposing content, we leave it out and say so in the findings.
Why is the NDA first?
Even metadata can be sensitive: a list of tools, teams and volumes says a lot about a company. So we reply to your request by email to agree an NDA, and no usage data is shared with us until it is signed.
What do we get at the end?
A findings review covering the AI tools, models and agents the metadata showed, who appears to own each, and where access, approval or policy looks thin. The written format of the findings is <audit report format - founder to fill>. The findings describe what the metadata showed. They are not a compliance assessment or a certification.
Is this a compliance audit or a penetration test?
No. It is not a legal opinion, a regulatory assessment, a security penetration test or a certification of any kind. It gives you an inventory and a view of risk indicators that you can take into your own governance, security and legal reviews. Swfte provides the technical controls, governance mechanisms and evidence that support an organisation’s own requirements, and the exact posture depends on your use case, jurisdiction, deployment and configuration.
What does it cost, and what happens afterwards?
The audit and the Connect key are free. Nothing continues automatically after the week. If you want to carry on, for example by running Nexus or Connect beyond the audit, we discuss that separately. Design-partner terms are available on request.
Do we need the Connect gateway key to take part?
No. The key is a separate, optional part of the offer. It lets you send one workload through a single gateway endpoint and see usage and cost per key, which is useful if you want to compare what you find against real traffic. It does not change what the audit covers.