What AI Compass Measures
AI Compass evaluates an organisation across four navigational dimensions — asking not just whether AI is being used, but whether it is aimed correctly, generating real value, supported by the right infrastructure, and architecturally sound under regulatory scrutiny.
① DIRECTION
Is the AI deployment aimed at the right business problem, with a clear and testable hypothesis?
② VALUE
Does the model create measurable, decision-driving value — or just produce dashboards?
③ READINESS
Do people, processes, and data infrastructure support deployment without creating insider risk or operational fragility?
④ INTEGRITY
Is the system lawful, auditable, and architecturally compliant with GDPR, EU AI Act, and sector-specific regulation?
The Scale: One to Five Stars
AI Compass benchmarks capabilities on a 1-to-5 star scale. Most early-stage ventures arrive at 1-2 stars. The diagnostic maps the gap and prescribes a sequenced path forward.
What each tier looks like
1 STAR — FRAGMENTED
No inventory of the AI systems in use. No named owner. A buyer's security questionnaire cannot be answered without guessing.
2 STARS — STRUCTURED
The systems are listed and policies exist on paper. Compliance documentation is not connected to how the product is actually built and run.
3 STARS — INTEGRATED
Each system is classified under the EU AI Act and has a named owner. Human review is logged. Suppliers and sub-suppliers are mapped. Procurement questions are answered with evidence.
4 STARS — MONITORED
Controls are tested on a schedule. Model changes and incidents are logged and reviewed. Evidence can be produced on request, within days.
5 STARS — ASSURED
Governance is verified by an independent party, for example certification against ISO/IEC 42001 and ISO/IEC 27001. Monitoring is continuous, and human oversight is designed into the system.
Oversight Needs People Who Can Judge the Answer
Human oversight is only as good as the person doing it. A reviewer who knows the field can tell a good answer from a plausible one. A reviewer who does not, cannot, however good the process around them is.
When AI produces something good enough in seconds, it is tempting to skip the demanding work where skill is built. A company that lets that happen ends up with reviewers who can no longer review.
Under Readiness, AI Compass therefore asks two things: who reviews what the model produces, and what that person knows. The EU AI Act points the same way. It requires human oversight of high-risk systems, and it requires providers and deployers to support the AI literacy of the people who work with AI on their behalf.
This is also why Attolloo looks for growth before cuts. The knowledge in people's heads is what makes the oversight real.
The Data Has to Be Ready First
Before deploying AI algorithms, systems must be data-ready. AI Compass audits pipeline architecture and automated governance to ensure models remain performant, auditable, and legally defensible.
In regulated sectors, this is not optional — it is the difference between a competitive asset and a regulatory liability. The diagnostic output feeds directly into Polaris sprint design and the 6Sense qualification score.
Understand Where You Are
AI Compass is part of every Readiness Assessment. If you want to understand where your organisation sits on the maturity scale — and what the sequenced path forward looks like — reach out.