CZ Test your AI
Inovai Platformrunning Testing, monitoring and evidence in one placeIt attacks your AI after every change and documents every finding. How the platform tests

AI security

AI inventoryEverywhere AI runs in your company, including the unapproved Chatbot and agent testingModel, widget code and data flow, before deployment and in operation Copilot auditPermissions and data leaks in Microsoft 365 Monitoring and evidenceA new run after every change, a report for the auditor OSINT investigationWhat an attacker finds about you and your people

AI integration

Digital colleagueA chatbot for your website and e-shop, and an in-house colleague on top of data and BI AI workflows and agentsConnections to ERP and CRM, agents that write and send Copilot StudioCustom agents in Microsoft 365 Local modelsData never leaves the company

Document extraction

Invoices and ordersExtraction and export to ERP without retyping Contracts, certificates and delivery notesData and deadlines, 10,000+ certificates at Favex Production ordersFrom email through the order to production documents Checks against rulesERP, standards and contracts, exceptions for approval

BI and data

Power BI and Qlik SenseReporting that management actually opens Data platformFabric, Databricks, data warehouses AI on top of reportsCopilot in Power BI and data agents Forecasts and recommendationsDemand forecasting, recommendations, anomalies

Workshops and analysis

Analysis and solution designWhere AI saves time and money, and how to build it AI for managementWhere AI makes sense and where it doesn’t Secure AI for ITAttacks, defence and evidence in practice AI literacy for teamsSafe use of AI, Article 4 of the AI Act
All areas

When you’re dealing with

We’re launching a chatbot or agentPre-deployment testing, retest and evidence for management We’re rolling out CopilotBefore Copilot finds what it shouldn’t We’re buying AI from a vendorTesting before you sign off acceptance We don’t know where AI is runningAn inventory of deployed and unapproved AI An audit or inspection is comingEvidence for the auditor, Czech National Bank or NÚKIB

Industries

Banks and insurersDORA and Czech National Bank supervision Public sectorChatbots for citizens, Copilot in public offices HealthcareSensitive data and the higher-obligations regime Energy and industryAgents on operational data

Partners

Chatbot vendorsSecurity testing under your brand Integrators and IT vendorsAI testing for your projects Law firmsTechnical partner for the AI Act

Evidence

Favex case studyAI we built: 10,000+ certificates in production Use casesEighteen situations, from chatbots to invoices Czech AI Security IndexHow easily models are bypassed in Czech, in progress

Company

TeamFour people, AI, data and security How we workConnect, attack, verify, document BlogFrom practice, no hype

Infrastructure

Coming soonGPU server in CzechiaLocal models, fine-tuning and attack testing without cloud APIs.What it will run

Inovai / About us

AI, data and security. From one team.

Four people who both build AI and attack it. The platform tests in Czech and English, and every finding is verified by a person.

Radek PallaMichael LapčíkJiří NeoralJan Koňařík

Radek, Michael, Jiří and Jan

Email us

michael@inovai.cz. The first step is non-binding.

Who we are

Four people you would otherwise look for in three companies

Security is led by Radek, who spent more than fifteen years at Forvia Hella working in IT, leading an international security team and in BI. Data and BI are in the hands of Jiří, a Microsoft MVP and one of the most respected Microsoft BI specialists in the Czech Republic. Delivery is run by Michael, an architect with eighteen years of projects for T-Mobile, Komerční banka and Nvidia. Jan builds the data pipelines it all runs on.

What you get

Secure AI you can evidence: the Inovai Platform attacks your chatbot, Copilot or agent in Czech and English after every change, and a human confirms serious findings. AI that saves time in operations, because it extracts and checks documents and a human decides on exceptions. Reporting with one version of the numbers. And because the same people do all of it, we build and test AI and evidence it to management and the auditor.

AI security

  • Chatbot and agent testing: attacks in Czech and English, the agent in a sandbox
  • Copilot audit: permissions, sharing and leak attempts
  • AI inventory and OSINT investigation
  • Monitoring after every change and evidence for the auditor
More on AI security

AI and data

  • Digital colleague and AI workflows on top of ERP and CRM
  • Agents in Copilot Studio and local models
  • Document extraction: invoices, contracts, certificates, production
  • BI and data: Power BI, Qlik Sense, Microsoft Fabric
  • Workshops: analysis, AI for management, AI literacy
All areas

What we do

AI security

The platform attacks your AI in Czech and English after every change. A human confirms serious findings, management and the auditor get the evidence.

AI integration

Chatbots and agents on top of your systems. Before we launch them, they go through our own attacks.

Document extraction

AI extracts, checks against the rules and records in the ERP. A human decides only on exceptions. More than 10,000 certificates at Favex.

BI and data

One version of the numbers for management, forecasts and AI on top of the right model. Our BI is led by a Microsoft MVP.

Workshops and analysis

Processes and data with management: where AI saves, what it requires and where to start. The output is a plan.

AI we built runs in production at Favex.

10,000+certificates processed
28 saverage extraction
95%+accuracy on key fields in text PDFs
25 countriesof suppliers, 12 languages
Case study

Who is behind it

Radek PallaSecurity and compliance

More than 15 years at Forvia Hella: leading an international security team and data architecture for more than 35 manufacturing plants.

  • ISO/IEC 27001 Lead Implementer
  • Ethical hacking
  • OSINT
  • Check Point
  • Brocade
  • CISSP - in preparation
Michael LapčíkArchitecture and delivery

More than 18 years of delivery for T-Mobile, Windy, Komerční banka, Nvidia and Uber.

  • Workflow and integration
  • Product and UX
Jiří NeoralBI and data platforms

Microsoft MVP, BI architect on Azure Databricks and Microsoft Fabric.

  • Microsoft MVP
  • Databricks Certified
  • MCSE Data
Jan KoňaříkData engineering

Data pipelines and automated evidence collection for the auditor.

  • Python
  • SQL
  • Qlik Sense
Standards and methodologies
  • The Czech Cybersecurity Act (Act No. 264/2025 Coll.) and Decrees No. 409/2025 and 410/2025
  • ISO/IEC 27001
  • ISO/IEC 42001
  • AI Act
  • DORA
  • OWASP LLM Top 10
  • MITRE ATLAS
Platforms and models
  • Microsoft Fabric
  • Azure Databricks
  • Power BI
  • Qlik Sense
  • Copilot Studio
  • Local models