CZ Test your AI
Inovai Platformrunning Testing, monitoring and evidence in one placeIt attacks your AI after every change and documents every finding. How the platform tests

AI security

AI inventoryEverywhere AI runs in your company, including the unapproved Chatbot and agent testingModel, widget code and data flow, before deployment and in operation Copilot auditPermissions and data leaks in Microsoft 365 Monitoring and evidenceA new run after every change, a report for the auditor OSINT investigationWhat an attacker finds about you and your people

AI integration

Digital colleagueA chatbot for your website and e-shop, and an in-house colleague on top of data and BI AI workflows and agentsConnections to ERP and CRM, agents that write and send Copilot StudioCustom agents in Microsoft 365 Local modelsData never leaves the company

Document extraction

Invoices and ordersExtraction and export to ERP without retyping Contracts, certificates and delivery notesData and deadlines, 10,000+ certificates at Favex Production ordersFrom email through the order to production documents Checks against rulesERP, standards and contracts, exceptions for approval

BI and data

Power BI and Qlik SenseReporting that management actually opens Data platformFabric, Databricks, data warehouses AI on top of reportsCopilot in Power BI and data agents Forecasts and recommendationsDemand forecasting, recommendations, anomalies

Workshops and analysis

Analysis and solution designWhere AI saves time and money, and how to build it AI for managementWhere AI makes sense and where it doesn’t Secure AI for ITAttacks, defence and evidence in practice AI literacy for teamsSafe use of AI, Article 4 of the AI Act
All areas

When you’re dealing with

We’re launching a chatbot or agentPre-deployment testing, retest and evidence for management We’re rolling out CopilotBefore Copilot finds what it shouldn’t We’re buying AI from a vendorTesting before you sign off acceptance We don’t know where AI is runningAn inventory of deployed and unapproved AI An audit or inspection is comingEvidence for the auditor, Czech National Bank or NÚKIB

Industries

Banks and insurersDORA and Czech National Bank supervision Public sectorChatbots for citizens, Copilot in public offices HealthcareSensitive data and the higher-obligations regime Energy and industryAgents on operational data

Partners

Chatbot vendorsSecurity testing under your brand Integrators and IT vendorsAI testing for your projects Law firmsTechnical partner for the AI Act

Evidence

Favex case studyAI we built: 10,000+ certificates in production Use casesEighteen situations, from chatbots to invoices Czech AI Security IndexHow easily models are bypassed in Czech, in progress

Company

TeamFour people, AI, data and security How we workConnect, attack, verify, document BlogFrom practice, no hype

Infrastructure

Coming soonGPU server in CzechiaLocal models, fine-tuning and attack testing without cloud APIs.What it will run

Inovai / AI security

Copilot finds the payslips too.

We find out what Copilot shows to whom, and help you fix sharing with labels and DLP.

Get a Copilot auditCopilot monitoring
Inovai / Copilot audit / tenant4 places to remediate

Sharing that Copilot “sees”

HR / Payroll 2026Everyone in the company
Supplier contractsexternal guest
Marketing / Campaignsdepartment
Management / MeetingsEveryone in the company

Leak attempt, external account

How much does the production manager earn?

According to the document Payroll 2026, the base salary is CZK 92,000 a month…

P0Payslips via CopilotRemediation: Confidential label, DLP, retest.
Problem

Copilot reads everything the user has rights to, even long-forgotten sharing.

What we’ll do

A permissions audit and leak attempts through accounts with different roles.

Result

A map of risky sharing, a remediation plan and a retest.

What you get

The map, findings, a remediation plan and evidence that the remediation worked.

Oversharing mapSites, libraries and teams that more people can access than should. Sorted by how sensitive the content is.
Findings with reproduction stepsThe exact question, the answer, the account and role it got through with, and the document the data came from.
Remediation plan and retestWhich sites to restrict, where to apply labels and which DLP to turn on. After the remediation, the same questions again.

How the audit works

Three test accounts, hundreds of questions, one remediation plan.

EemployeeMmanagerGexternal guest
Step 1Scope and accountsYou create three accounts: employee, manager, external guest. None gets extra rights.
What does the production manager earn?You don’t have access to that.
Step 2Leak attemptsFor each account, hundreds of questions in Czech and English: salaries, contracts, personnel files.
HR / Payroll 2026everyoneContractsexternal guestManagement meetingsConfidential
Step 3Review and remediationWe go through the findings with your Microsoft 365 administrator: site restrictions, labels, DLP.Verified by a human
4places to fix0after the retest
Step 4Retest and monitoringThe same questions for the same accounts again. Optionally, a test after every tenant change.

We test your tenant with your consent and only through accounts you create. We don’t test the vendor’s model, we test your deployment.

Start with a pilot on one system.

One chatbot, assistant or Copilot, an attack suite and a first report with findings. All you need is a test account and the system owner’s consent.

Request a pilot

FAQ

We’re rolling out CopilotCopilot StudioMonitoring and evidence
But Copilot respects permissions. So what are you auditing?

The permissions themselves, because in practice they are set too broadly. Copilot is just the first tool that makes this visible.

Will we see real sensitive data in the results?

We mask sensitive data in transcripts and hand full transcripts only to the person you choose. We take nothing away with us.

Will you fix the settings for us?

We always prepare the proposed fixes; your administrator sets up labels and DLP, or we do it together. We run the check after the change.