Bilbo

High

AI assistant integrated with Metabase that facilitates query creation, data exploration and insight extraction using natural language.

Facts

Domain
bilbo.ai
Risk level
High
Home country
Estados Unidos

Home country is the headquarters of the company behind the tool. It is not a claim about where data is processed or stored — data residency depends on the plan you hold and must be confirmed with the vendor.

Why Bilbo is classified as high risk

AI agent with advanced automation capability. May have access to company systems and data.

What to do about it

Requires a written policy before approval. Define what kind of data may be entered, verify whether training on your data can be disabled in the plan you hold, and record the tool in your AI inventory. Approving without a policy is the single most common source of audit findings.

Here is the distinction almost every company gets wrong in its first audit: no framework — LGPD, ISO 42001, the EU AI Act — requires you to block AI tools. All of them require you to know what is in use and to have made a conscious, recorded decision about each item. A high-risk tool approved under a written policy is compliance; a low-risk tool in use with nobody aware of it is an audit finding.

Is Bilbo being used in your company?

Tangerin AI detects usage of Bilbo and other AI tools across company workstations — recording which tool, when, and on which machine. Never the content of conversations, prompts or uploaded files.

Other autonomous agents tools