About WhichAITools
Helping enterprises understand and manage AI tool risk
Our Mission
Employees are using AI tools every day—from ChatGPT to GitHub Copilot to Midjourney. But most organizations don't know which tools their teams are using, what data is being shared, or what the compliance implications are.
WhichAITools provides a comprehensive, searchable directory of popular AI tools with detailed risk assessments, helping IT and security teams make informed decisions about AI tool usage in their organizations.
Risk Scoring Methodology
How We Calculate Risk Scores (1-10 Scale)
Our risk scoring system evaluates AI tools across multiple dimensions to provide a holistic view of security and compliance risk:
Data Handling (40%)
- • Where data is stored
- • Retention policies
- • Training on user inputs
- • Data residency controls
Compliance (30%)
- • SOC 2 certification
- • GDPR compliance
- • HIPAA compliance
- • Industry certifications
Security Controls (20%)
- • Enterprise features
- • Access controls
- • Audit logging
- • Data loss prevention
Transparency (10%)
- • Privacy policy clarity
- • Terms of service
- • Security documentation
- • Vendor reputation
Risk Level Interpretation
Enterprise-ready with strong security
Acceptable with proper configuration
Requires careful evaluation
Not recommended for enterprise
Data Sources
Our risk assessments are based on publicly available information including:
- • Vendor privacy policies and terms of service
- • Public security documentation and certifications
- • Compliance reports and attestations
- • Industry research and security analyses
- • Vendor websites and support documentation
Last updated: February 2026. Risk scores and compliance information may change. Always verify directly with vendors for critical decisions.
Powered by Aona AI
WhichAITools is brought to you by Aona AI, the AI governance platform that helps enterprises automatically discover, monitor, and control AI tool usage across their organization.
Automatic Discovery
Detect AI tool usage across your network without agents
Risk Monitoring
Real-time risk scores and compliance tracking
Policy Enforcement
Block, allow, or redirect AI tools based on your policies
Questions or Feedback?
We're constantly updating our directory with new tools and improved risk assessments.
Get in Touch