Hub / AI governance
Templates, guides and insights for businesses that use AI and want to do it safely: the policy, the EU AI Act, ISO 42001 and the controls that make AI tools safe to open.
Template
One page staff will read, a traffic-light card, and a note on why each clause is there.
The model
Five controls that make enterprise AI tools safe to open, instead of blocking them.
Guide
Who is in scope, the four risk categories, the timeline and a twelve-step plan.
Standard
What the AI management standard asks for, and who actually needs certification.
Free templates drawn from GOVERN, each with an editable download. Together they are a working AI governance system.
Word template
The one-page usage policy, the matrix of common uses and the annex outline.
Spreadsheet
List the AI systems in use, including the unofficial ones, with a risk tier for each.
Word template
Eight questions to answer before AI informs a decision about a person.
Checklist
A fortnight-by-fortnight plan from no policy to a working governance cadence.
Everything on this hub is drawn from GOVERN, the third book in our series. It covers the access decision, what the law and contracts require, the governance stack and how to run it, for businesses that use AI rather than build it.
Publishing 7 December 2026.
Readiness is not a maturity score; it is a set of specific conditions that decide whether an AI programme delivers in the first quarter or stalls in the second. Twelve questions a leadership team can answer in an hour.
Charities run on trust and on too little time. The AI opportunities that respect both are practical ones, none of them needs a large budget, and most of them need a policy before a product.
The contractual commitment that your data is not used to train the model is what makes enterprise AI tools safe to open. What the commitment actually covers, where it does not apply, and the six things to confirm at contracting.
"Human in the loop" is a slogan until someone decides where the loop closes. The real design question is the threshold: how sure must the system be before it acts alone, and who decides that, on what evidence.
Most investment templates were written before AI. Four fields, risk category, data protection, human oversight and transparency, make governance part of every AI decision instead of a gate at the end.
The AI management-system standard, explained without the jargon: what it asks for, who actually needs certification, and why a governed-access model gets most businesses most of the way there.
We design the governed-access model, the policy and the training with you, aligned to the EU AI Act.