XCrawl

Facts

Domain

xcrawl.com

Category

Automation

Risk level

High

Home country

Estados Unidos

Home country is the headquarters of the company behind the tool. It is not a claim about where data is processed or stored — data residency depends on the plan you hold and must be confirmed with the vendor.

Why XCrawl is classified as high risk

AI automation tool. May have access to internal systems, APIs, and company data via integrations.

What to do about it

Requires a written policy before approval. Define what kind of data may be entered, verify whether training on your data can be disabled in the plan you hold, and record the tool in your AI inventory. Approving without a policy is the single most common source of audit findings.

Here is the distinction almost every company gets wrong in its first audit: no framework — LGPD, ISO 42001, the EU AI Act — requires you to block AI tools. All of them require you to know what is in use and to have made a conscious, recorded decision about each item. A high-risk tool approved under a written policy is compliance; a low-risk tool in use with nobody aware of it is an audit finding.