CZ Test your AI
Inovai Platformrunning Testing, monitoring and evidence in one placeIt attacks your AI after every change and documents every finding. How the platform tests

AI security

AI inventoryEverywhere AI runs in your company, including the unapproved Chatbot and agent testingModel, widget code and data flow, before deployment and in operation Copilot auditPermissions and data leaks in Microsoft 365 Monitoring and evidenceA new run after every change, a report for the auditor OSINT investigationWhat an attacker finds about you and your people

AI integration

Digital colleagueA chatbot for your website and e-shop, and an in-house colleague on top of data and BI AI workflows and agentsConnections to ERP and CRM, agents that write and send Copilot StudioCustom agents in Microsoft 365 Local modelsData never leaves the company

Document extraction

Invoices and ordersExtraction and export to ERP without retyping Contracts, certificates and delivery notesData and deadlines, 10,000+ certificates at Favex Production ordersFrom email through the order to production documents Checks against rulesERP, standards and contracts, exceptions for approval

BI and data

Power BI and Qlik SenseReporting that management actually opens Data platformFabric, Databricks, data warehouses AI on top of reportsCopilot in Power BI and data agents Forecasts and recommendationsDemand forecasting, recommendations, anomalies

Workshops and analysis

Analysis and solution designWhere AI saves time and money, and how to build it AI for managementWhere AI makes sense and where it doesn’t Secure AI for ITAttacks, defence and evidence in practice AI literacy for teamsSafe use of AI, Article 4 of the AI Act
All areas

When you’re dealing with

We’re launching a chatbot or agentPre-deployment testing, retest and evidence for management We’re rolling out CopilotBefore Copilot finds what it shouldn’t We’re buying AI from a vendorTesting before you sign off acceptance We don’t know where AI is runningAn inventory of deployed and unapproved AI An audit or inspection is comingEvidence for the auditor, Czech National Bank or NÚKIB

Industries

Banks and insurersDORA and Czech National Bank supervision Public sectorChatbots for citizens, Copilot in public offices HealthcareSensitive data and the higher-obligations regime Energy and industryAgents on operational data

Partners

Chatbot vendorsSecurity testing under your brand Integrators and IT vendorsAI testing for your projects Law firmsTechnical partner for the AI Act

Evidence

Favex case studyAI we built: 10,000+ certificates in production Use casesEighteen situations, from chatbots to invoices Czech AI Security IndexHow easily models are bypassed in Czech, in progress

Company

TeamFour people, AI, data and security How we workConnect, attack, verify, document BlogFrom practice, no hype

Infrastructure

Coming soonGPU server in CzechiaLocal models, fine-tuning and attack testing without cloud APIs.What it will run

Inovai / AI integration

An agent in Teams. It sees only what it’s allowed to.

Agents on SharePoint and Teams that see only what the person asking is allowed to. We check them before launch.

Get a Copilot Studio agentCopilot audit
Teams / Purchasing agenttested before launch
Account: purchasing officer

What terms do we have in the contract with Ocel Morava?

Payment terms 30 days, price linked to the steel index, 3-month notice period. Source: Contracts/Ocel-Morava-2026.pdf

Account: external guest

What terms do we have in the contract with Ocel Morava?

You don’t have access to this document. Please contact purchasing.

Verified before launch

  • Sources: Purchasing library onlyverified
  • Same permissions as in SharePointverified
  • Actions: creates the task, a human confirms sendingsandbox
okAttacks through documents0 of 25 got through. Runs again after the sources change.
Problem

Agents that people build themselves see everything their author sees.

What we’ll do

Scenario, permissions, building the agent and an audit before launch.

Result

An agent for a department that sees only what it should.

What you get

The agent runs where people already work: in Teams, Outlook and SharePoint.

Answers from SharePointPolicies, contracts, project documentation. An answer with a link to the document, and only from what the person asking may see.
Actions in email and systemsIt summarises a thread, drafts a reply, creates a task or writes to the ERP. A human confirms before sending.
Permissions before the agentThe agent sees what the person asking sees. We fix loose sharing in SharePoint before we build the agent.

How it works

Four steps from scenario to trained users.

SourcesPurchasing libraryUsers12 peopleActionscreate a task
Step 1Choosing the scenarioOne agent, one department, a clear task. We check the Microsoft 365 and Copilot Studio licences.
HR / Payroll 2026everyoneContractsexternal guestManagement meetingsConfidential
Step 2Permissions and sourcesWe review sharing in SharePoint, labels and DLP. Whatever doesn’t fit, we fix before building.
EemployeeMmanagerGexternal guest
Step 3Build and auditTopics, sources, connectors and actions. Test accounts with different roles try to leak data.Verified by a human
PilotTrainingOperation
Step 4Launch and trainingA pilot for one department, training for users and administrators. A new test after changes.

We run the audit with the written consent of the tenant owner. We delete the test accounts when we finish.

FAQ

Digital colleagueWe’re rolling out CopilotAI inventory
How is it different from standard Copilot?

Standard Copilot is a general assistant on your data. A Copilot Studio agent has one task, selected sources, its own rules and actions, so it is more predictable and can be tested.

Can the agent take data outside the department?

Only if permissions allow it; the agent sees what the person asking sees. That’s why we review sharing before launch and try leaks through accounts with different roles.

People are already building agents themselves. What to do about it?

First an AI inventory: who built what and on which data. Then rules on who may publish, and a check before publishing.