Sample Reports — From Real OSS Scans

Real scans. Real repos. See what procurement gets.

We scanned GitHub's most popular AI repositories. Download sample Response Kits — 27 procurement questions pre-answered with scan-evidenced findings from real codebases.

What's in a Trust Pack + Response Kit

✓ Enterprise Buyer Quick Reference (10 questions pre-answered)

✓ Executive Briefing with peer benchmarking

✓ Risk Scorecard with severity + ROI actions

✓ AI Model Registry (auto-assembled from scan)

✓ NIST AI RMF, ISO 42001, EU AI Act mapping

✓ 30/60/90 Action Plan with cost vs. risk

✓ Pre-filled AI Governance Questionnaire

✓ Code examples (BEFORE/AFTER for each fix)

✓ Machine-readable JSON export for automation

Real scans. Real repos. Verifiable results.

389

AI SDK Detections

116

Compliance Findings

0/45

Controls Mapped

470K+

GitHub Stars Scanned

SaaSVista

AI Due Diligence
Response Kit

27-Question Compliance Response Package

openclaw/openclaw

Response Kit Cover

27-question AI Due Diligence Response Kit — the document procurement receives.

Response Kit — OpenClaw

Total Questions

Scan-Evidenced

Intake-Confirmed

Requires Review

Assessment Context

Responses are evidence-graded using a three-tier confidence system: scan-evidenced (green), intake-confirmed (blue), and requires-review (amber).

Real data from OpenClaw scan — downloadable below

Evidence Summary

Every answer graded: scan-evidenced, intake-confirmed, or requires review.

01 — AI Inventory & Classification

Q1SCAN EVIDENCED

What AI models, SDKs, and third-party AI services are currently deployed in your production environment?

Our codebase scan identified 108 AI integration points spanning 11 providers, including OpenAI, MiniMax, Alibaba Qwen, Moonshot, and Baidu ERNIE, with 12 distinct model registrations documented.

NIST AI RMF: GOVERN 1.2ISO 42001: A.6.2EU AI Act: Art. 11

Source: inventory, model_registry

Q2SCAN EVIDENCED

How are your AI systems classified by risk level, and what criteria do you use?

Sample Q&A

Each question answered with scan evidence, framework mappings, and remediation.

Framework Mapping per Question

Q1 — AI Inventory

NIST GOVERN 1.2ISO A.6.2EU Art. 11AI-CAIQ: GRC

Q5 — Data Privacy

NIST MAP 1.1ISO A.8.4EU Art. 10AI-CAIQ: DSP

Q9 — Export Compliance

NIST GOVERN 1.7ISO A.5.4EAR/BISAI-CAIQ: STA

Q14 — Bias Controls

NIST MAP 2.3ISO A.8.5EU Art. 10(2)AI-CAIQ: AIS

Q21 — Incident Response

NIST MANAGE 4.1ISO A.6.2.2EU Art. 62AI-CAIQ: SEF

Every answer cross-referenced to compliance frameworks

Framework Coverage

Answers mapped to NIST AI RMF, ISO 42001, EU AI Act, and AI-CAIQ controls.

OpenClaw326K stars

11 AI providers. 6 Chinese. 15 hardcoded secrets. 1 BIS Entity-Listed.

Langchain-Chatchat37K stars

136 detections in 265 files. 75% single-framework dependency. Entity-Listed Zhipu AI.

ChatGPT-on-WeChat42K stars

2 BIS Entity-Listed providers. 5 Chinese AI. WeChat data pipeline to 8 external AI providers.

Download sample Response Kits

Enter your work email to access 3 complete AI Due Diligence Response Kits — 27 procurement questions pre-answered from real codebase scans. This is what your buyer's procurement team receives.

No spam. All repos are public on GitHub — results independently verifiable.

Minutes · Up to 3 repos · Read-only access · Design partner pricing available

Get Your AI Governance Docs