CZ Test your AI
Inovai Platformrunning Testing, monitoring and evidence in one placeIt attacks your AI after every change and documents every finding. How the platform tests

AI security

AI inventoryEverywhere AI runs in your company, including the unapproved Chatbot and agent testingModel, widget code and data flow, before deployment and in operation Copilot auditPermissions and data leaks in Microsoft 365 Monitoring and evidenceA new run after every change, a report for the auditor OSINT investigationWhat an attacker finds about you and your people

AI integration

Digital colleagueA chatbot for your website and e-shop, and an in-house colleague on top of data and BI AI workflows and agentsConnections to ERP and CRM, agents that write and send Copilot StudioCustom agents in Microsoft 365 Local modelsData never leaves the company

Document extraction

Invoices and ordersExtraction and export to ERP without retyping Contracts, certificates and delivery notesData and deadlines, 10,000+ certificates at Favex Production ordersFrom email through the order to production documents Checks against rulesERP, standards and contracts, exceptions for approval

BI and data

Power BI and Qlik SenseReporting that management actually opens Data platformFabric, Databricks, data warehouses AI on top of reportsCopilot in Power BI and data agents Forecasts and recommendationsDemand forecasting, recommendations, anomalies

Workshops and analysis

Analysis and solution designWhere AI saves time and money, and how to build it AI for managementWhere AI makes sense and where it doesn’t Secure AI for ITAttacks, defence and evidence in practice AI literacy for teamsSafe use of AI, Article 4 of the AI Act
All areas

When you’re dealing with

We’re launching a chatbot or agentPre-deployment testing, retest and evidence for management We’re rolling out CopilotBefore Copilot finds what it shouldn’t We’re buying AI from a vendorTesting before you sign off acceptance We don’t know where AI is runningAn inventory of deployed and unapproved AI An audit or inspection is comingEvidence for the auditor, Czech National Bank or NÚKIB

Industries

Banks and insurersDORA and Czech National Bank supervision Public sectorChatbots for citizens, Copilot in public offices HealthcareSensitive data and the higher-obligations regime Energy and industryAgents on operational data

Partners

Chatbot vendorsSecurity testing under your brand Integrators and IT vendorsAI testing for your projects Law firmsTechnical partner for the AI Act

Evidence

Favex case studyAI we built: 10,000+ certificates in production Use casesEighteen situations, from chatbots to invoices Czech AI Security IndexHow easily models are bypassed in Czech, in progress

Company

TeamFour people, AI, data and security How we workConnect, attack, verify, document BlogFrom practice, no hype

Infrastructure

Coming soonGPU server in CzechiaLocal models, fine-tuning and attack testing without cloud APIs.What it will run

Inovai / Who it’s for

Patient data must not leave, not even into a chat.

We test assistants that work with health data. The platform and the models can run on your premises.

Talk to usLocal models
Your server / no internetdata never leaves the building
Language modelfine-tuned on your task
Vector databasedocuments and permissions
Judge modelevaluates answers
Testing platformattacks and evidence
Outbound internet traffic: none
Problem

AI works with the most sensitive data, often under the higher-obligations regime of the Act.

What we’ll do

Assistant testing, local models and AI inventory.

Result

AI that never leaves the hospital, with evidence for NÚKIB (the Czech cyber security authority).

What’s pushing you

Sensitive data, the higher-obligations regime and AI you didn’t choose.

Health data in every answerAn assistant over medical records sees diagnoses, medication and personal ID numbers. One question from the wrong account and a patient’s details are in the answer.
Higher-obligations regime of Act No. 264/2025The higher-obligations regime requires testing assets before operation, records and a retest. Whether you fall under it depends on your registration with NÚKIB. But GDPR protects patient data in every practice, so a test makes sense even without NÚKIB.
AI from system vendorsThe hospital information system, PACS or booking system switches on AI features in an update. They process patient data, but nobody has assessed them as an asset.

What we do for you

A test that never leaves your network, and evidence for NÚKIB.

What medication is patient Novák in room 12 taking?You don’t have access to this patient.
Step 1Pre-deployment testingAttacks in Czech: leaking another patient’s data, bypassing roles, manipulation.
$ inovai test --lang cs,enconnected: chatbot-supportsuite: 412 attacks, 2 languagesrun 9 started
Step 2Platform on your serverThe models for attacks and evaluation run on your premises; nothing goes out.
Finding confirmed by a humanReproduction attached
Step 3Human reviewA tester confirms serious findings, then a retest after the fix. A person signs the report.Verified by a human
Website chatbottest firstCopilotauditInvoice assistantok
Step 4Inventory and evidenceAn overview of AI including clinical systems, a report with evidence, mapping to Decree No. 409/2025.

We test with test patients wherever the system allows it. The agent runs in a copy with fake tools, and nothing is written to the records.

What the auditor will ask

Decree No. 409/2025 requirements and the state of evidence for AI in the hospital in one place.

Inovai / audit materialready for handover

What the auditor will ask and what they get

Patient data in answerslocal model
Higher-obligations regimetest records
AI in the hospital systemtest before acceptance
Assistant over medical reportsCZ test

FAQ

Local modelsWe’re launching a chatbot or agentAn audit or inspection is coming
Do we need patient consent for the test?

The test should not use real patients’ data; we use test patients or anonymised data. Where that isn’t possible, the processing is part of your GDPR data protection impact assessment and the test runs only on your server.

Can we run the test during normal operations?

Yes. Attacks are texts, not load, they target test accounts, and we agree the pace and the testing window with you.

How does the test fit Decree No. 409/2025?

An assistant or chatbot is a technical asset of a regulated service, and a pre-operation test, records of the date and people involved, and a retest match what the decree requires. Whether that is enough is for the auditor or NÚKIB to judge.