Rules for AI use
AI governance for the EU AI Act and daily work
We help you manage AI use and implement the EU AI Act requirements that apply to your business. Our specialists establish responsibilities, approval rules and human oversight, then help your teams use them in practice.
Who this service is for
AI decisions that need an owner
- Your staff use AI tools nobody approved, often called shadow AI, and data sharing rules vary between teams.
- You build or buy AI that helps decide who gets hired or who gets credit.
- A customer’s questionnaire or your board asks how AI tools are approved and checked.
- You want to prepare for ISO 42001, the international standard for managing AI responsibly.
What the work achieves
Responsible AI adoption and practical compliance
-
Applicable AI requirements put into practice
We identify the requirements relevant to your AI use and help implement the agreed policies, oversight and risk management measures.
-
Teams can use AI within clear limits
Staff know which uses are approved, how to protect information and when human review is needed. Governance supports useful AI adoption across the business.
-
Management can oversee AI risks
Defined responsibilities and regular reviews help management assess AI risks, approve changes and demonstrate governance to customers or auditors.
What we cover
The AI rules we put into practice
List tools and their uses
We record current and planned AI tools, what they do, their suppliers and the information they receive.
Identify duties and risks
We check your role under the EU AI Act, for example whether you build a tool or only use it. We then assess how each use could affect people.
Set approval and data rules
We agree who can approve a tool, what data it may reach and how exceptions are recorded.
Decide when a person steps in
We define when someone must review an AI result, change it or stop the tool being used.
Check suppliers and train staff
We review supplier arrangements and teach staff the approved uses, limits and reporting steps for their tools.
Prepare policies and decision records
We organise policies, tool approvals and review records to show how you meet your duties and, where asked, ISO 42001 requirements.
How it works
We start with the AI your teams already use
-
01
Find the uses that matter
We meet your teams, list the AI tools they use and note the decisions and information each one touches.
-
02
Agree responsibilities and limits
We set approval rules, human checks and data limits with the people responsible for security, legal matters and operations.
-
03
Try the rules on real cases
We apply the rules to a few current uses, record the decisions and add detail where teams got stuck.
- 04
Keep decisions under review
We name who reviews each tool, and connect AI problems to the way you already report and handle risks.
What we need from your team
- A senior person who can sign off the company’s AI rules.
- One contact in each team that uses AI tools.
- Your legal or data protection lead, for the rules on personal data.
- The supplier contracts for the AI tools you buy.
AI Governance
Your AI tool list sets the scope and price
We set the price from your AI tool list: how many tools, how much harm each could cause and how many suppliers we review. ISO 42001 preparation, if you want it, adds to the scope.
We agree the work and price with you in writing before we start.
Common questions
Common questions
Related services
Free 30-minute call
Plan your approach to AI governance
Name the AI tools your teams use on a free 30-minute call, and we help you choose which to review first.
