Back
S
SpekrisSample scan
Scan your org

AI asset inventory — acme-corp

18 repositories scanned. 5 AI systems discovered across code and ML services. This is a sample — sign in to run Spekris on your own organization.

4m 12s·6 connectors·Scan completed 2 minutes ago
Assets found
5
Across 18 repositories
Critical
3
Require immediate review
Orphaned or inactive
3
Owner departed or dormant
HIPAA exposure
4
Potential PHI touchpoints
3 critical findings 1 with no owner on record, 4 involving data covered by HIPAA. Recommended for review before your next audit.

Findings

CriticalML Scoring Service

claims-fraud-v3

acme/claims-engine · .env.example

Confidence

94%

Production ML model scoring every claim submission for fraud. Confidence threshold 0.85.

Finding: No documented owner or model card. If this model drifts or produces biased outputs, claims are being approved or rejected with no human review and no accountability.

No owner on record
HIPAASOC 2
postgresopenai
CriticalClinical NLP Model

nlu-triage-bert

acme/ml-services · ml/nlu-triage/requirements.txt

Confidence

96%

Fine-tuned Bio_ClinicalBERT model classifying urgency of patient messages. Runs as a FastAPI service.

Finding: Owner @achen has not committed in 203 days and may have left the company. A patient triage model with no active owner is a governance and patient safety risk.

achen@acme.com·203d since last commit
HIPAAEU AI Act
postgres
CriticalPrototype · no auth

prototype-chat

acme/platform · experiments/prototype-chat/chat-server.ts

Confidence

97%

Patient-provider WebSocket chat prototype. No authentication. In-memory only. No audit logging.

Finding: If this prototype ever processed real patient data in this state, it may create significant HIPAA exposure. Original author inactive for 189 days.

ajiang@acme.com·189d since last commit
HIPAA
HighActive AI feature · 20% rollout

ai-coding-suggestions

acme/platform · experiments/feature-flags/flag-config.json

Confidence

88%

AI-powered ICD-10 and CPT billing code suggestions. Active at 20% rollout. Fine-tuned model.

Finding: No documented accuracy baseline. No human review step before codes are used. Inaccurate suggestions could create billing compliance risk.

schen@acme.com·91d since last commit
HIPAASOC 2
HighML cron agent

run-anomaly-detection.ts

acme/claims-engine · cron/weekly/run-anomaly-detection.ts

Confidence

91%

Weekly ML-based anomaly detection on all claims. Checks upcoding, duplicate billing, unusual volumes.

Finding: Owner is documented only in a code comment. If James Liu has left, there is no accountable owner for a system that makes compliance decisions every Sunday.

jliu@acme.com·74d since last commit
SOC 2
postgresslacksendgrid

These findings are from a fictional company.

Connect your own sources and Spekris will run the same scan on your real code, cloud, and automations. First scan takes under five minutes. No agent to install.

No credit card required. Credentials encrypted with AES-256-GCM.