Discover what's really happening inside your organization.
Before you can govern AI, you need to see it. Metrica finds shadow AI, maps compliance gaps, and turns guessing into evidence — in days, not quarters.
You can't govern what you haven't found.
Most AI inside organizations was never procured, approved, or logged. By the time auditors ask, you're reconstructing it from Slack threads and invoice trails. There's a better way.
The tools people actually use
Procurement has one list. Reality has another. The gap is usually 4×.
Where AI runs unsupervised
Copy-pasted prompts in free-tier accounts. No audit trail. Real customer data.
Policies nobody follows
A policy that nobody acknowledges is a policy that nobody enforces.
Vendors without due diligence
One signed DPA, twelve sub-processors. Your audit chain stops at vendor #1.
From blind spots to action, in three steps.
Start in minutes, not weeks. No SDK, no integration project, no six-month rollout. Just answers.
Launch a Discovery
Send a guided survey — or an AI-led conversation — to the teams doing the work. They tell you what tools, systems, and data they actually touch.
See the real picture
Findings auto-map to EU AI Act, GDPR, NIS2, ISO 42001. Severity ranked, owner suggested, evidence attached.
Act on what matters
A prioritized plan, executive-ready reports, and a clear path from first discovery to continuous compliance.
See what your organization is really doing — and what risks it creates.
Discover is the entry point. Eight capabilities that turn a survey into a compliance-grade map of your AI estate.
Guided discovery surveys
Structured questionnaires that reach every team and department.
AI-powered conversations
Advanced mode: a chat with AI that digs deeper and detects hidden risks.
Automatic risk mapping
Responses map to regulatory frameworks the moment they arrive.
Gap analysis
A clear view of where you comply, where you don't, and what's missing.
Risk classification
AI systems categorized by risk level under the EU AI Act.
Prioritized action plans
Know what to fix first based on regulatory urgency and real impact.
Maturity assessment
Not pass/fail. Understand how mature your posture actually is.
Executive reports
PDF-ready for boards, auditors, and regulators. In one click.
Start free. Hand off the heavy lifting to a partner.
métrica Discover
Tells you what's happening. Finds the AI. Maps the risk. Fast. Free.
métrica ECIJA
Our legal partner takes Discovery findings and turns them into real implementation: policies, controls, evidence, audits, and ongoing compliance work.
métrica Control
Orders IT operations — equipment, support, vendors, budgets.
What you walk away with.
Not a PDF full of maybes. Artifacts your legal team, your board, and your auditor will actually use.
Compliance score
A single number the board understands.
Gap report with severity
Every finding, ranked, with its source.
Risk register
Structured, exportable, audit-ready.
Maturity assessment
Baseline to track against.
Prioritized remediation plan
What to fix first, who owns it.
Executive PDF
Ready to drop into the next board deck.
Implementation delegated to ECIJA.
The free Discovery findings don't sit in a PDF: ECIJA, a leading EU tech law firm, picks up every qualified lead and delivers implementation, audit and ongoing compliance work. You run the assessment; they do the legal heavy lifting.
You can't fix what you haven't found.
Start with a free discovery assessment. See what's really happening in your organization — and what you need to do about it.