AI Risk Score
One number for the board.
When your CEO asks "how exposed are we on AI right now?" you currently have three options: hand wave, show a 40-page audit report, or schedule a call. The AI Risk Score is option four: a 0-100 number, refreshed every quarter, signed for the regulator, that everyone in the room can react to.
What it is
A weighted sum of five components your AI governance program either has or doesn't:
- Audit Coverage. How many AI calls are recorded as tamper-evident receipts.
- Detector Breadth. Coordination loops, prompt injection, PII leak, bias drift, hallucination.
- Policy Coverage. Built-in rules enabled plus your custom rules.
- Enforcement Rate. Fraction caught BEFORE the call, not after.
- Compliance Readiness. The housekeeping an auditor checks.
What it does for you
The CEO conversation gets shorter.
If the number is 84 you have one type of meeting. If it's 31 you have another. Either way the meeting isn't 'walk me through the spreadsheet.'
The audit prep gets cheaper.
Every component breaks down into a checklist with a remediation. The auditor sees the score, the breakdown, and the receipts behind the score. There is no 'evidence package' to assemble. It's already assembled.
The quarter-over-quarter delta is the story.
Score went from 42 to 76 last quarter because you wired the gateway, enabled bias drift, and got the receipt signing key out of dev mode. That sentence is the slide.
The number is signed.
The quarterly export endpoint returns a JSON artifact with an Ed25519 signature. A regulator three years from now can verify the score the board saw was the score the system produced. No 'we'll send you a screenshot.'
Designed for CISOs, COOs, Heads of AI Risk
The Risk Score is the first thing in Prova built for someone other than the developer wiring the SDK. It's the artifact you can put in your monthly governance committee deck, in your insurance renewal application, in your regulator pre-meeting prep.
What it is not: a guarantee. A score of 100 doesn't mean nothing will go wrong. It means you've made every move available to a customer of Prova today to ensure that if something does go wrong, you will know, you will have evidence, and you will have a defensible position.