Skip to main content

A free tool from DVARA

Production AI readiness checklist

DVARA’s free checklist helps you see whether production AI is visible, controlled and explainable. Answer 15 plain-English questions and get a short action list.

Self-reported guidance, not an audit. No sign-up.
  1. 1Know it
  2. 2Control it
  3. 3Prove it
  4. 4Your checklist

Know it

Choose Not sure when you cannot confirm a control. It will appear in your checklist.

Knowing what AI you run

Know what is running and who is making each call.

Can you list every production AI app and agent?
Help me answer

Include internal tools, customer-facing features, background jobs and experiments that reached production.

Can you link every AI call to an app, team or agent?
Help me answer

A provider bill or shared API key is not enough if it cannot identify the caller.

Are tool calls and agent-to-agent calls authenticated and checked?
Help me answer

Think beyond model calls: include tools, MCP servers and requests passed between agents.

Controlling what it costs

Stop unexpected use while it is happening.

Does AI usage stop when a budget is reached?
Help me answer

An alert after the limit is crossed does not count as enforcement.

Can you set limits by team, product or agent?
Help me answer

One company-wide limit cannot show or control which workload is responsible.

Can you stop an agent caught in a loop?
Help me answer

Look for a limit on repeated calls or actions, not only a cost alert.

Choose an answer for each question to continue. 0 of 15 answered.

About this checklist

What does this checklist measure?

It asks whether you can see, limit and explain the AI running in production. The 15 questions cover inventory, identity, spend, agent actions, data and audit evidence.

Does a good result prove that production AI is safe?

No. The result reflects what you reported. It does not test a control, inspect your systems or provide a security, compliance or legal conclusion.

Are my answers sent to DVARA?

No. Your answers stay in this page and disappear when you refresh or start again. Analytics records only that the checklist was started or completed, not what you answered.

The questions relate to common risks in the OWASP Top 10 for LLM Applications and OWASP MCP Top 10. See the DVARA crosswalk for the detailed relationship.

DVARA is an AI governance platform. To see how it governs model, tool and agent traffic, book a demo.