Skip to content

CZ Test your AI

Inovai Platformrunning Testing, monitoring and evidence in one placeIt attacks your AI after every change and documents every finding. How the platform tests

AI security

AI inventoryEverywhere AI runs in your company, including the unapproved Chatbot and agent testingModel, widget code and data flow, before deployment and in operation Copilot auditPermissions and data leaks in Microsoft 365 Monitoring and evidenceA new run after every change, a report for the auditor OSINT investigationWhat an attacker finds about you and your people

AI integration

Digital colleagueA chatbot for your website and e-shop, and an in-house colleague on top of data and BI AI workflows and agentsConnections to ERP and CRM, agents that write and send Copilot StudioCustom agents in Microsoft 365 Local modelsData never leaves the company

Document extraction

Invoices and ordersExtraction and export to ERP without retyping Contracts, certificates and delivery notesData and deadlines, 10,000+ certificates at Favex Production ordersFrom email through the order to production documents Checks against rulesERP, standards and contracts, exceptions for approval

BI and data

Power BI and Qlik SenseReporting that management actually opens Data platformFabric, Databricks, data warehouses AI on top of reportsCopilot in Power BI and data agents Forecasts and recommendationsDemand forecasting, recommendations, anomalies

Workshops and analysis

Analysis and solution designWhere AI saves time and money, and how to build it AI for managementWhere AI makes sense and where it doesn’t Secure AI for ITAttacks, defence and evidence in practice AI literacy for teamsSafe use of AI, Article 4 of the AI Act

When you’re dealing with

We’re launching a chatbot or agentPre-deployment testing, retest and evidence for management We’re rolling out CopilotBefore Copilot finds what it shouldn’t We’re buying AI from a vendorTesting before you sign off acceptance We don’t know where AI is runningAn inventory of deployed and unapproved AI An audit or inspection is comingEvidence for the auditor, Czech National Bank or NÚKIB

Industries

Banks and insurersDORA and Czech National Bank supervision Public sectorChatbots for citizens, Copilot in public offices HealthcareSensitive data and the higher-obligations regime Energy and industryAgents on operational data

Partners

Chatbot vendorsSecurity testing under your brand Integrators and IT vendorsAI testing for your projects Law firmsTechnical partner for the AI Act

Evidence

Favex case studyAI we built: 10,000+ certificates in production Use casesEighteen situations, from chatbots to invoices Czech AI Security IndexHow easily models are bypassed in Czech, in progress

Company

TeamFour people, AI, data and security How we workConnect, attack, verify, document BlogFrom practice, no hype

Infrastructure

Coming soonGPU server in CzechiaLocal models, fine-tuning and attack testing without cloud APIs.What it will run

Inovai / About us

You know upfront what you’ll get and who is working on it.

Scope in writing upfront, an output for every step, results verified by a person.

Inovai / scope / chatbot testscope confirmed

Written scope before we start

What we testwebsite chatbot, assistant over contracts

Who talks to itcustomers, sales, external guests

Owner’s consentin writing, including the chatbot vendor

Proposalscope, outputs and price in one document, before we start

Outputreport with reproduction steps, retest, material for the auditor

Datatest accounts, deleted afterwards

Scope confirmed by both sides. We start with a pre-launch test.

Problem

AI offers promise a result but don’t say how they’ll get there.

What we’ll do

A short call, a written scope, work in steps, each with an output.

Result

You know up front what you’ll get, and you have it in hand.

How an engagement runs

Four steps; in the third, a person verifies.

deviation

Step 1Scope and proposalWhat you’re deploying, who talks to it, the system owner’s consent. You get the scope and the proposal in writing.

ScopeWorkOutput

Step 2WorkTest, audit or deployment. You follow progress and findings as they happen in the platform portal.

Finding confirmed by a humanReproduction attached1 disputed, awaiting a tester

Step 3Human reviewSerious findings are confirmed by a person, not a model.Verified by a human

Report, run 9P1Prompt leakP2AI labellingokInjection in PDF

Step 4Evidence and handoverA report with reproduction steps, a retest after the fix as part of the test, material for management and the auditor.

You have the scope and the output in writing. If something changes during the work, the scope changes too, openly.

What we insist on

Consent and contractWe test someone else’s system only with the owner’s written consent, and for a supplied chatbot, its vendor’s consent too.

Data under controlOperation in the EU or on your server; we delete test data when we finish.

We don’t decide for the auditorWe provide evidence and supporting material. The auditor decides on compliance.

Tell us what you’re deploying.

We’ll reply by email and suggest a short call. You then get the scope and proposal in writing.