Skip to content

Consulting · AI Governance

Know which AI your people use, and prove it's safe.

We find every AI tool your organisation uses, assess the risk and write a policy people can follow. Our work lines up with ISO/IEC 42001, the NIST AI RMF and the EU AI Act.

  • ISO/IEC 42001
  • NIST AI RMF
  • EU AI Act

Sound familiar?

Signs it’s time to look at this

  • Staff use ChatGPT, Copilot or similar tools and nobody's keeping track.

  • Customers, your board or regulators are asking how you use AI.

  • You sell into the EU and need to understand the AI Act.

  • You want to adopt AI but don't know where to start safely.

What we cover

What’s included

AI usage governance

We find and assess every AI tool, then help you enforce your policy, not just publish it.

AI readiness

We look at your plans, data, people and processes, so the AI you adopt is safe and worth the money.

How it works

From “we think we’re fine” to “here’s the proof”

Four steps. At each one, you know what's happening, what it costs and what you'll get.

  1. 01

    Free scoping call

    Thirty minutes on your data, your AI use and what a first assessment would look like. No obligation.

  2. 02

    Assessment

    For every control we ask two questions: are you doing it, and how well? If you can't show evidence, the score can't go above a set level. Every score explains how we reached it.

  3. 03

    Your report pack

    Four clear documents, signed off by a qualified person, so you know where you stand and what to do next.

  4. 04

    Fix, then stay in control

    We help you close the gaps, most urgent first, then keep checking in so they stay closed.

What’s in your report pack

  • Where you stand

    Your current position, with a confidence level on every score.

  • Action plan

    What to fix first, across people, process and technology.

  • Risk register

    The risk behind each gap, and who owns it.

  • Evidence pack

    Audit-ready, signed off, with the working shown.

How we score maturity

Level 3 is the line between describing a control and proving it.

  1. 1

    Unsupported

    Nothing in place yet.

  2. 2

    Asserted

    You say it happens, but there's no proof.

  3. 3

    Evidenced

    You can show it happens.

  4. 4

    Measured

    You track how well it works.

  5. 5

    Sustained

    It keeps working, and keeps improving.

Often paired with

Data Governance

Data you can rely on: lawful, protected and provable.

Explore Data Governance

Questions

Straight answers

The things people usually ask us first. If your question isn’t here, just ask.

It means knowing which AI tools your organisation uses and what they do with your data, and having simple rules, with proof, that they're used safely and fairly. It's the difference between hoping AI is used well and being able to show it.

Not sure where you stand? Let’s find out in 30 minutes.

A free, no-obligation call about your data and your AI use. You’ll leave with a clearer picture either way.