Project Information
System Type(Multiple choice)
Certifications & Assurance Evidence
Threat Catalog

By default, Versatile AI Risk Assessment uses a standard catalog of 52 AI threats. You can import your own structured catalog (.json) here.

Using loaded catalog (52 threats)
State & Versioningv1.0
Auto-Save active
Current Version: v1.0
Project backupThis project is stored locally in this browser. Browser data can be deleted. Export a project file regularly.
Storage
Local in this browser
Last local save
-
Last project-file export
-
Schema version
1.1.0
Project version
-

No project file has been exported yet.

Version History
No saved versions yet.
BaseStandard Catalog (52)CustomProject specific(0)
Progress by Phase
Supply Chain
1/3
Development
0/4
Production
0/43
Custom Threats
Catalog version history
0
Relevant Threats
0
Critical (Residual)
0
High (Residual)
0
Medium (Residual)
Inherent Risk Matrix(LTO + VF + S = Total Risk)

No relevant threats evaluated.

Residual Risk Matrix(LTO + VF + S = Total Risk)

No relevant threats evaluated.

Evaluated Threats (sorted by Residual Risk)

No relevant threats evaluated.

Export
XLSX

Excel Export

Complete workbook with system overview, risk assessment, audit context, and linked recorded threat measures.

All threats incl. not relevant onesSystem info on separate sheetInherent & residual risk values as separate columnsRecorded threat measures with scope evidence and audit detailsColor coded by risk level
CSV

CSV Export

Multi-section CSV: the risk matrix followed by a threat-scoped measures register. Automated imports must parse the logical blocks separately.

All threats incl. not relevant onesSemicolon separated, UTF-8 with BOMInherent & residual risk values as separate columnsDedicated logical register of recorded threat measuresReadable in Excel; Power BI/SIEM require block-aware parsing
PDF

PDF Report

Comprehensive risk assessment report; when measure management is enabled, it includes recorded measures linked to threats.

System information and metadataRisk matrix - inherent & residualAll evaluated threats with risk valuesWith measure management: only linked threat measures with stable IDsVersion history and changelog
DOCX

Word Report

Editable Word counterpart to the PDF for human authoring and redlining. Pick the modules and bundle them into one document or one per module.

Branded cover and a real, updatable table of contentsAnalysis, EU AI Act, and GDPR, each with linked measuresSelection dialog: choose modules, output and languageRisk, DPIA, obligation, and measures registers, fully editable
CSV / JSON

Mapping export (EU AI Act)

Map the EU AI Act assessment into a customer-defined target schema (ServiceNow Import-Set, LeanIX fact sheet, or your own) and export as CSV or JSON.

Define target columns, types and field bindingsWhitelisted transforms (mapValue, dateOnly, joinList ...), no scriptingBuilt-in ServiceNow and LeanIX starter profilesReusable profiles, import/export as JSON
OSCAL / JSON

Annex IV / OSCAL export

Generate the EU AI Act Annex IV technical documentation structure and an OSCAL component definition from the assessment - machine-readable artefacts for auditors and GRC platforms.

EU AI Act Annex IV (Art. 11) technical documentation, all 9 pointsOSCAL 1.1.2 component definition with control implementationsGaps are flagged, never fabricatedDeterministic output (reproducible identifiers)
JSON

Combined Export

Complete, re-importable assessment export including the full measures register and module projections.

Threat Assessment (all 50+ threats)EU AI Act flowchart answers & resultCompliance checkbox statesComplete measures register plus module ID setsRe-import via Import Assessment
ZIP

Evidence Bundle

All-or-nothing package of three PDF and three XLSX reports from the same frozen measures snapshot plus machine-readable state.

Three PDF and three XLSX reports (threats, EU AI Act, GDPR)Machine-readable state, re-importableSHA-256 manifest and SHA256SUMS per fileProvenance: app, catalog, risk model and edition version; SHA-256 secured, unsigned in the offline edition
SVG / PNG

Risk matrix as image

Risk heatmap (inherent and residual) as a vector graphic (SVG) or pixel image (PNG) for slides, management reviews and reports.

Inherent and residual matrix side by sideSVG scales losslessly, PNG for quick pastingColours and risk levels match the PDF/Word report
Comparison Analysis

Load an earlier version of this analysis as a baseline. The comparison highlights improvements, deteriorations, and status changes per threat.

Select a project file (.vra-project.json) or JSON export
earlier version for comparison
Current Analysis
Current Analysisv1.0
System Type:–Phase:–Users:–Owner:–
Comparison Baseline
–
System Type:–Phase:–Users:–Owner:–Description:–
Important Legal Notice
1. Guidance Tool Only
This assessment serves exclusively as a non-binding guidance and orientation tool to support your own self-assessment. It does not constitute a definitive compliance determination.
2. No Legal or Professional Advice
The results, recommendations, and classifications do not constitute legal, tax, compliance, security, or any other form of binding professional advice. Versatile AI Risk Assessment does not make binding regulatory classifications under the EU AI Act, GDPR, NIS2, DORA, or sector-specific supervisory requirements.
3. Disclaimer of Liability
No warranty, liability, or guarantee is assumed for accuracy, completeness, currency, legal validity, or suitability for a specific regulatory filing. Mandatory statutory liability remains unaffected.
4. User Responsibility
Use of this assessment and implementation of any derived measures remain under the user's responsibility. The user must verify results against the specific system, document the final assessment, and obtain qualified legal, compliance, or supervisory advice where required.
System Description (from Step 1 - read-only)
No system information provided.