The audit checklist
Download checklist CSV ↓How to use it
Run the checklist in a 30–60 minute session with the workflow owner and at least one person who actually performs the work. Mark unknowns instead of guessing; unknowns are readiness work.
What you should have at the end
A one-page workflow baseline, a clear AI/non-AI boundary, a value hypothesis, named controls, unresolved dependencies and a go / hold / redesign decision.
Frequently asked questions
Is this checklist a security or compliance audit?
No. It is an operational opportunity checklist. Security, privacy, legal and compliance reviews may be required depending on the workflow and context.
Should every workflow pass every checklist item?
No. The checklist is designed to surface unknowns and blockers, not to force every idea through.
Can I use this with non-AI automation?
Yes. Several questions intentionally help determine when a rules-based or process solution is better than AI.