AI governance and policy
Clear rules for how your organisation uses AI, so staff can use it safely and leadership can account for it.
Staff are already using AI tools, with or without a policy. We help you set rules that are practical rather than prohibitive: which tools are approved, what information may be shared with them, who signs off new uses, and how risks are recorded and reviewed.
We draw on established frameworks such as the NIST AI Risk Management Framework, and on the data protection law that applies to you, such as Uganda’s Data Protection and Privacy Act 2019 or the EU General Data Protection Regulation.
Examples of the work
- An AI use policy staff can follow, covering approved tools and what data may go into them
- An AI risk register and a simple approval process for new AI uses
- Data protection assessments for AI systems that handle personal data
- Alignment with the NIST AI Risk Management Framework and the rules that apply where you operate