Know what AI exists before you govern it
Most organisations cannot list the AI in use across teams and vendors. Cogna8 builds that list from what teams register and what it finds on connected platforms, and keeps it current.
AI systems
Models, agents, endpoints, copilots and MCP servers, declared and discovered.
| Asset | Source | Business unit | Owner | Risk | Controls | Status | Last seen |
|---|---|---|---|---|---|---|---|
| Claims triage agentAgent | AWS Bedrock | Claims | J. Patel | High | 5 of 5 | Gated | 2m |
| Underwriting risk summariserServing endpoint | Databricks | Underwriting | S. Okafor | High | 4 of 6 | Review due | 6h |
| Fraud signal modelModel | Databricks | Claims | R. Lindqvist | High | 6 of 6 | Evidenced | 1h |
| Customer reply assistantModel deployment | Azure AI Foundry | Customer Service | M. Chen | Medium | 3 of 4 | Evidenced | 8m |
| Broker email drafterCopilot | Registered | Distribution | T. Nguyen | Medium | 2 of 4 | Evidence due | 1d |
| Policy wording searchMCP server | Registered | Legal | A. Rossi | Low | 2 of 2 | Evidenced | 3h |
| Unknown gpt-4o callerObserved traffic | Telemetry | Finance | None | Unrated | None | Unowned | 14m |
Declared and discovered
Registered systems sit next to those Cogna8 finds in cloud platforms and traffic, so the gaps show up: models nobody registered, agents with no owner, endpoints still running after a project ended.
- Models, agents, endpoints, copilots and MCP servers in one list
- Owner, business unit, risk tier and control coverage on every row
- Unmanaged and unowned AI flagged for triage
- Usage and last-seen dates rolled up per system
How AI systems arrive in the inventory
| Source | What it brings | How |
|---|---|---|
| Cloud platforms | Model deployments, serving endpoints and registered agents | Read-only connectors for AWS Bedrock, Databricks and Azure AI Foundry |
| Registration | Agents, copilots and MCP servers teams declare themselves | Console form, registration API or an agent card URL |
| Telemetry | AI calls nobody registered | OpenTelemetry generative AI signals, with content stripped |
| Vendors | Third-party models and AI features in purchased software | Vendor and model records linked to the systems that use them |
Discovery triage
The copilot works through newly discovered AI systems: it matches duplicates, finds owners from cloud tags and the directory, drafts registrations and marks each proposal in place. Nothing changes until a person approves it.
Discovery
7 AI systems found since the last review, not yet registered.
- Matched 2 to existing systems
- Found owners from cloud tags and the directory
- Drafted 1 registration from the Copilot catalogue
- Waiting on 3 decisions from you
- Request risk assessments for new systems
R. Singh becomes the accountable owner and gets a review task.
Create the record with owner J. Patel, tier Medium (proposed).
Let's connect
Tell us where your AI programme is today. We start with a short, scoped pilot on your own AI estate, and every enquiry is handled in confidence.