AI Governance
Build AI Governance capability your organisation can actually run.
Why you need this
AI governance is built around
decisions, not tools.
Get Visibility
Know what AI is in use, who approved it, and who answers for it.
Take Control
Decision rights and approvals sized to risk, so adoption moves without losing control.
Own the Decisions
Named owners for every material use of AI.
Build Trust
Assurance your executive and board can test, not just be told about.
Instead of a policy, you get a capability.
The situation this addresses
AI does not wait for a policy.
AI is already in the business. The executive expects outcomes, the team is flat out, and nobody has the capacity - or the confidence - to drive it safely.
AI arriving through vendor products and platforms, without approval or review
A policy in place, but no way to show it operates
Decisions being made by systems nobody formally owns
Boards and regulators asking questions that are hard to answer with evidence
Common Pitfalls
Why most AI governance gets stuck
A policy, not a capability
The policy exists, but it cannot say what AI is running, who approved it, or who answers for it.
Governing tools, not decisions
Tool-by-tool rules are out of date the week they are written. The decisions AI touches are stable. Govern those.
The vendor blind spot
AI arrives inside supplier products, and a vendor update can change your risk overnight. Most organisations have no process that notices.
Ideal Fit
Who AI Governance is for
Strong fit for:
AI in use ahead of the governance around it
Executives accountable for AI they did not procure and cannot see
Boards and committees that want assurance they can test
Government agencies with mandated obligations and fixed dates
Not the right start if…
Looking for a tool recommendation or platform build
After a compliance document rather than an operating capability
What you walk away with
Three things that put governance in the room with executives and the board.
The Register
Every material use of AI recorded, risk-rated, with a named accountable owner.
The Framework
Decision rights, approvals and incident pathways, integrated with the governance you already run.
The Assurance
High-risk oversight, vendor accountability, and reporting your board can test.
The value is not the documents. The value is a capability that runs without us.
Our Approach
Why this works
Fewer rules. Clearer decisions. Real assurance.
Built around decisions, not tools - so it stays current as the technology changes
Sized to risk - low-stakes uses move fast, high-stakes uses get real scrutiny
Little and often - governance built into how decisions get made, not a one-off artefact
Tested on your live use cases before handover
Senior-led - the people who scope the work deliver it
Our Process
How the work runs
Phase 1 - Understand
Assess how effective current governance is and discover the AI already in use, including AI embedded in vendor products. You get an executive playback of the gaps, risks and priorities, and an AI inventory with owners and risk ratings.
Phase 2 - Establish
Put the machinery in place: the working group, decision rights, the use case register, screening and assessment, incident pathways - each tested on live use cases and handed to a named owner. You get the terms of reference, framework, populated register, templates and procedures.
Phase 3 - Operate
Run it and prove it: executive oversight of high-risk uses, vendor accountability, and board reporting as a standing rhythm. You get decision packs, a vendor assurance schedule, an AI-inclusive assurance map and a board reporting format.
How we partner
AI Governance takes one of two shapes
Project
Engage just the phases you need.
Scoped to what already exists, not a fixed template
A defined exit, agreed before work starts
Retained
Your standing AI governance function.
Runs the Operate phase as a standing cadence
Monthly arrangement while internal capability builds
Either way we build capability you own.
Get Started
Start with the Snapshot
A short, evidence-based read on whether your AI governance is fit for purpose.