CZ Test your AI
Inovai Platformrunning Testing, monitoring and evidence in one placeIt attacks your AI after every change and documents every finding. How the platform tests

AI security

AI inventoryEverywhere AI runs in your company, including the unapproved Chatbot and agent testingModel, widget code and data flow, before deployment and in operation Copilot auditPermissions and data leaks in Microsoft 365 Monitoring and evidenceA new run after every change, a report for the auditor OSINT investigationWhat an attacker finds about you and your people

AI integration

Digital colleagueA chatbot for your website and e-shop, and an in-house colleague on top of data and BI AI workflows and agentsConnections to ERP and CRM, agents that write and send Copilot StudioCustom agents in Microsoft 365 Local modelsData never leaves the company

Document extraction

Invoices and ordersExtraction and export to ERP without retyping Contracts, certificates and delivery notesData and deadlines, 10,000+ certificates at Favex Production ordersFrom email through the order to production documents Checks against rulesERP, standards and contracts, exceptions for approval

BI and data

Power BI and Qlik SenseReporting that management actually opens Data platformFabric, Databricks, data warehouses AI on top of reportsCopilot in Power BI and data agents Forecasts and recommendationsDemand forecasting, recommendations, anomalies

Workshops and analysis

Analysis and solution designWhere AI saves time and money, and how to build it AI for managementWhere AI makes sense and where it doesn’t Secure AI for ITAttacks, defence and evidence in practice AI literacy for teamsSafe use of AI, Article 4 of the AI Act
All areas

When you’re dealing with

We’re launching a chatbot or agentPre-deployment testing, retest and evidence for management We’re rolling out CopilotBefore Copilot finds what it shouldn’t We’re buying AI from a vendorTesting before you sign off acceptance We don’t know where AI is runningAn inventory of deployed and unapproved AI An audit or inspection is comingEvidence for the auditor, Czech National Bank or NÚKIB

Industries

Banks and insurersDORA and Czech National Bank supervision Public sectorChatbots for citizens, Copilot in public offices HealthcareSensitive data and the higher-obligations regime Energy and industryAgents on operational data

Partners

Chatbot vendorsSecurity testing under your brand Integrators and IT vendorsAI testing for your projects Law firmsTechnical partner for the AI Act

Evidence

Favex case studyAI we built: 10,000+ certificates in production Use casesEighteen situations, from chatbots to invoices Czech AI Security IndexHow easily models are bypassed in Czech, in progress

Company

TeamFour people, AI, data and security How we workConnect, attack, verify, document BlogFrom practice, no hype

Infrastructure

Coming soonGPU server in CzechiaLocal models, fine-tuning and attack testing without cloud APIs.What it will run

Inovai / Who it’s for

The agent gets access to operations. Then what?

We test the agent in a sandbox before it touches operations, and we document it.

Talk to usChatbot and agent testing
Inovai / sandbox / agent-maintenanceagent running in a copy
1Maintenance ticketPDF and fault description
2Extractionequipment, fault, date
3Check in CMMShistory, spare parts
4Exceptiona person approves the intervention
5Write to CMMSwithout retyping
An instruction in a document asked the agent to create a shutdown order: stopped in the sandbox, P1 finding.
Problem

An agent with access to operations can be manipulated through data.

What we’ll do

Sandbox testing, AI inventory including OT, and monitoring.

Result

An agent under control, and evidence for Decree No. 409/2025.

What’s pushing you

Agents, the higher-obligations regime and AI in the supply chain.

An agent with access to operationsAn assistant on MES reads today and creates work orders tomorrow. An instruction hidden in a document makes it take action nobody requested.
Higher-obligations regime and OTCzech Decree No. 409/2025 requires testing assets before operation and measures for OT, and an agent with access to operations is a risk even without it.
Supply chainAI arrives in a SCADA update, a supplier portal or a service company’s tool. You’re accountable for it without having chosen it.

What we do for you

A sandbox instead of production, an overview including OT, evidence for Decree No. 409/2025.

TicketAgentSandbox
Step 1Agent test in a sandboxA copy of the agent with fake tools: MES, CMMS, email. Attacks via documents and tickets.
SCADAupdate with AIMESassistantService portalunknown model
Step 2AI inventory including OTAn overview of AI in IT and in operational technology: SCADA, MES, supplier and service company portals.
Finding confirmed by a humanReproduction attached
Step 3Human reviewA tester confirms serious findings, then a retest after the fix. A person signs the report.Verified by a human
new model: P1 regression, 0 after the fix
Step 4Monitoring and evidenceA new run after every change of model, prompt or connector. A report with evidence for Decree No. 409/2025.

We don’t touch operational technology: from you we need a copy of the agent with fake tools and a slice of operational data. The result is a list of what the agent would do, not what it did.

What the auditor will ask

Decree No. 409/2025 requirements and the state of evidence for AI in IT and OT in one place.

Inovai / audit materialready for handover

What the auditor will ask and what they get

Agent on MES datasandbox
Isolated networkon-premises version
Control system vendorassessment
Decree 409evidence

FAQ

Chatbot and agent testingLocal modelsAI inventory
We don’t have agents yet, just an assistant over documentation. Does a test make sense?

Then now is the time to test. An assistant over operational documentation already knows the procedures and parameters, and it is usually the first to be given tools.

Can you test in an isolated network?

Yes. The version on your server works with local models, needs no outbound connection, and the report is produced on your premises.

What about a foreign control system vendor?

We test with their written consent on a copy or test instance. If they don’t consent, we document it as a supplier risk for the assessment under Decree No. 409/2025.