Key facts

  • Start with the free operating model canvas to see the shape of the work.
  • Proportionate to size — a lightweight but effective setup for SMEs, not enterprise-scale overhead.
  • Covers inventory, classification, roles, policy and review cadence.
  • Works alongside EU AI Act and ISO 42001 compliance work.
  • Get in touch to discuss what a workable governance baseline looks like for you.

The problem

Many businesses have AI spread across teams with no consistent oversight: no inventory, no agreed risk process, and policies (if they exist) that nobody follows. Left ungoverned, this creates both regulatory and operational risk.

What the service includes

Building or fixing your AI inventory, designing a risk classification approach, running an operating-model workshop using our canvas, and drafting the policies and review cadence that keep governance running after we leave.

How it works

1. Discovery. Understand your current AI use and any existing governance.

2. Design. Build the inventory, classification approach and operating model together.

3. Document. Draft policies and a RACI for ongoing operation.

4. Handover. Leave you running it yourselves, with support available as needed.

Why work with AI Act Ready

Practical, founder-led governance design that fits your size rather than a generic enterprise template. Get in touch to talk through your starting point.

Frequently asked questions

What is an AI governance operating model?

How governance is structured and runs day to day — decision rights, committees, workflows and escalation paths.

Do small companies need AI governance?

Yes — proportionate governance, even a lightweight inventory, policy and risk process, materially reduces exposure.

How long does it take to set up AI governance?

A workable baseline in 60 to 90 days; maturity builds over 12 months or more.

Who is responsible for AI governance?

A named accountable owner, often an executive, supported by a cross-functional group spanning legal, risk, security and product.

How does AI Act Ready help?

Practical, founder-led assessment and remediation — clear classification, buyer-ready evidence and proportionate governance, without consultant padding.

Related pages

Sources

Last updated 19 June 2026.