AI Governance & Guidelines
AI policies no one reads help no one.
Many companies respond to AI with a PDF that ends up somewhere on the intranet. No one reads it. No one follows it. Employees use ChatGPT on their phones – and no one knows.
Good AI governance is not a compliance document. It is an operating system: clear rules, pragmatic guardrails and strategic decisions that genuinely guide the team.
What we develop together
Current state & shadow use What are employees using today — officially and unofficially? Do they know what they may use and what they may not? Do they know why?
Data protection & GDPR-compliant tool use Which tools are allowed for which data? The answer is rarely black and white. In practice, that means: document X may be used without restriction, document Y only in anonymised form, document Z not at all. This classification must be specific, clear and understandable for every employee. Where European alternatives are needed — and why.
Transparency rules for AI content When must a text be labelled as AI-generated? What applies to images, videos and chatbots? Clear rules by channel and use case — internal and external.
Guardrails for sensitive areas HR, Legal, finance and customer communications — different areas need different rules. Not everything has to be banned. But some things do.
Strategic no-go's What should the company never pursue with AI, in principle? If you offer a premium service, you should not replace customer service with a bot. If you rely on trust, you should not publish AI-generated text without labelling it. These decisions must be recorded in writing.
Pragmatic ethical framework No philosophical treatise — just clear principles that work in day-to-day use and are modelled by the executive team.
Embedding in the team A document alone changes nothing. We also develop how the guidelines are communicated, explained and reviewed.
What the audit already delivers
Anyone who has completed an AI Readiness Audit receives an initial foundation for governance and ethics as part of the report. This includes an assessment of existing policies and shadow AI use. The AI governance consultancy builds on this.
Who it is for
Companies already using AI — but without clear rules yet
Executive management and HR who want to take responsibility before anything goes wrong
Organisations in regulated industries with higher compliance requirements