AIMOaaS
Interpretation guide

How to interpret PenCal results (without overstating certainty)

Designed for internal sharing. PenCal is directional and supports governance prioritization, not legal determinations.

The safe framing

  • - Use PenCal to prioritize what to validate next.
  • - Do not present PenCal outputs as a compliance conclusion.
  • - Avoid quoting numbers as facts without evidence validation.
  • - Route stakeholders to the right next step (Tier 1 / evidence brief / partner pathway).

What the estimate uses

PenCal uses simplified inputs and generalized assumptions to generate a directional result. These assumptions are not claims about your organization; they are modelling shortcuts for triage.

What it cannot determine

Legal applicability, statutory outcomes, actual liabilities, or whether a specific prohibited practice is present. Those depend on facts, jurisdictions, controls, and use-case detail.

What evidence improves confidence

Log-based discovery (where AI tools are used, how, and at what scale).
Approved-tool pathway and intake/allowlisting decisions.
Monitoring coverage and review cadence.
Exception handling and follow-up actions with traceability.

Where to go next

Next step

Use PenCal for triage, then validate with evidence. Choose your experience: