--- title: "AI maturity audit – XALT Northstar" url: https://xalt-northstar.com/maturity-audit/ description: "Seven questions on your organization's AI capabilities, mapped to the three waves of AI adoption." updated: 2026-10-04 source: XALT Northstar --- AI maturity audit # Which wave is your organization riding? Seven questions on the capabilities that decide whether AI pays off: use cases and value, governance and security, technical foundation, data, culture, cost control and upskilling. You get your wave, your weakest capability, and the next step that moves it. [Start the audit →](#audit) [Talk to Philipp instead](https://xalt-northstar.com/talk-to-philipp/) *[Graphic: Early Movers Lead Wave 3 – Three waves of AI adoption. Wave 1, individual productivity, and wave 2, process transformation, are small; most organizations are still in them. Wave 3, the Enterprise Operating System, is a large wave where early movers are changing how their industry works, with the Enterprise Brain above it. "Not ready" only decides who leads.]* 1. Wave 1 Individual productivity 2. Wave 2 Process transformation 3. Wave 3 The Enterprise Operating System, with the Enterprise Brain 4. Most organizations are still in waves 1 and 2. Early movers are changing how their industry works. *“Not ready” only decides who leads.* Seven capabilities · about five minutes ## Where is your organization today? Pick the answer that is true for most of your organization today, not the plan. Your answers stay in this browser: nothing is stored or sent. 1. 1 AI use cases & value Where does AI create measurable value today? Not started Nowhere we could name yet. Wave 1 Individuals save time with AI tools, but nobody measures it. Wave 2 A few whole processes run with AI, with a business owner and a number we track. Wave 3 AI is part of how we decide and operate, and its value is reported like any other KPI. 2. 2 Governance & security How is AI use governed? Not started No rules yet, or a blanket ban. Wave 1 An acceptable-use policy; people use their own tools. Wave 2 Approved tools with SSO, access limits and logging for the processes that use AI. Wave 3 Every agent action is approved, logged and traceable, with per-source access that can be revoked. 3. 3 Technical foundation & integration How connected is AI to your systems? Not started Not connected to anything. Wave 1 Chat tools next to our systems; people copy and paste. Wave 2 Some agents read from and write to our core systems (e.g. Jira, CRM, ERP). Wave 3 Agents work across our systems through a shared, governed integration layer. 4. 4 Data strategy & quality What does AI know about your company? Not started Only what people paste into a prompt. Wave 1 Some documents are uploaded to individual tools. Wave 2 A curated knowledge base for some departments, with owners. Wave 3 One curated, permissioned brain that every agent reads from, with sources on every answer. 5. 5 Organizational transformation & culture How has your organization changed around AI? Not started It hasn’t; AI is an IT topic. Wave 1 Enthusiasts experiment on their own. Wave 2 Leadership sponsors AI and some teams have changed how they work. Wave 3 Roles, processes and leadership are designed around working with agents. 6. 6 Cost control Do you know what AI costs you? Not started No idea. Wave 1 Licences per person; usage cost is unknown. Wave 2 We track cost per use case and per team. Wave 3 Cost is planned and capped per agent, and we can switch models without a rebuild. 7. 7 Upskilling How well can your people work with AI? Not started No training yet. Wave 1 A few self-taught power users. Wave 2 Structured enablement for some teams (workshops, handbooks). Wave 3 Role-based AI literacy for everyone, and teams build their own workflows. 0 of 7 answered --- XALT Northstar Find out which wave your organization is in, and what the next step takes. Built by XALT. Explore - [Event Chief of Staff](https://xalt-northstar.com/) - [Personal Agent](https://xalt-northstar.com/personal-agent/) - [AI Services](https://xalt-northstar.com/ai-services/) - [Regulated AI](https://xalt-northstar.com/regulated-ai/) - [Agentic Engineering](https://xalt-northstar.com/agentic-engineering/) - [Brain](https://xalt-northstar.com/brain/) - [Blog](https://xalt-northstar.com/blog/) - [Talk to Philipp](https://xalt-northstar.com/talk-to-philipp/) Contact - [Contact](https://xalt-northstar.com/contact/) - [hey@xalt.de](mailto:hey@xalt.de) XALT - [xalt.de](https://www.xalt.de/) - [Imprint](https://xalt-northstar.com/imprint/) - [Privacy Policy](https://xalt-northstar.com/privacy/) - [Trust Center](https://trust.inc/xalt) In progress SOC 2 Type 1 · ISO 27001 · ISO 9001 · GDPR Not certified yet. [See the Trust Center](https://trust.inc/xalt) © 2026 XALT LLC. All rights reserved.