AI Governance

AI governance is how an organisation decides which AI it uses, who is accountable for it, and how its risks are controlled. Here’s what it covers…

The EU AI Act regulates AI by risk level and applies to companies outside the EU too. Here’s who it covers, the key dates, the obligations…

Unacceptable, high, transparency and minimal risk: how the EU AI Act sorts AI systems, with real examples of each and how to work out where yours…

Since February 2025, eight AI practices are banned in the EU, with two more from December 2026, and fines up to €35 million or 7% of…

Since February 2025, companies that use AI must take steps to build their staff’s AI literacy. The 2026 Digital Omnibus softened the wording but kept the…

Your obligations under the EU AI Act depend on your role. Here’s the difference between a provider and a deployer, with examples and the cases where…

The NIST AI RMF is a free, voluntary framework for managing AI risk, built around four functions: Govern, Map, Measure and Manage. Here’s how it works…

ISO/IEC 42001 is the first certifiable international standard for managing AI. Here’s what an AI management system is, what the standard requires and whether certification is…

An AI acceptable use policy tells staff which AI tools they may use, what data they must never share and who to ask. Here’s what to…

An AI inventory is a list of every AI system you build, buy or use. It’s the first step of AI governance and EU AI Act…