AI governance
AI governance that makes AI pay off.
Find out what AI is really being used across your business, set clear and workable rules, and document it. Firms with a formal AI policy are ten times more likely to report major productivity gains (TCD and Microsoft, 2026).
Flagship · 3 weeks
The AI Governance Sprint
In three weeks you go from “we think people are using ChatGPT” to a documented, practical AI governance set-up your team understands.
- AI use survey: a short anonymous staff survey that finds the tools people actually use, including personal accounts
- Tool register and risk triage: every AI tool listed and rated green, amber or red
- AI Act check: your uses mapped against the Act's categories, so you know what applies
- AI-use policy: short, plain-English and workable, written with your team
- AI-literacy plan and training records supporting your Article 4 obligations
- Tool approval checklist for deciding on new AI tools in minutes
- One-page board summary of your position and next steps
Week 1: Discover
Kick-off, staff survey, interviews with key people, tool inventory.
Week 2: Decide
Risk triage, AI Act check, draft policy and approval checklist, reviewed with you.
Week 3: Embed
Final documents, a team briefing on the rules, the board summary and a 90-day plan.
Ongoing
AI Governance Partner
For firms that want governance kept current without hiring. Quarterly reviews, policy updates as rules and tools change, approval of new tools, a helpline for AI questions and an annual staff refresher.
Ask about the Partner service2 hours
AI Regulation Essentials (EU and UK)
A briefing for directors and senior teams on what the EU AI Act means for you after the 2026 changes, ending with a one-page action list.
See the AcademyThe EU AI Act in plain English
What applies, and when (as of October 2026)
The Digital Omnibus, in force since 27 July 2026, postponed the high-risk rules. Most SMEs using everyday AI tools face lighter obligations today, mainly literacy and transparency.
| OBLIGATION | APPLIES FROM | WHO IT AFFECTS | WHAT TO DO |
|---|---|---|---|
| AI literacy (Article 4) | 2 Feb 2025 | Any organisation using AI at work | Take measures to support staff AI literacy, and keep training records |
| Prohibited practices | 2 Feb 2025 | Everyone | Confirm you don't use banned practices such as manipulative techniques or social scoring |
| Transparency (Article 50) | 2 Aug 2026 | Firms using chatbots or publishing AI-generated content | Tell people when they're dealing with AI or AI-generated content |
| High-risk uses (Annex III) | 2 Dec 2027 | AI used in hiring, credit, education and similar areas | Inventory these uses now; prepare risk management and human oversight |
| AI in regulated products (Annex I) | 2 Aug 2028 | Makers of products such as medical devices and machinery | Plan conformity work with your product regulator |
Sources: Alice Labs AI Act timeline, Gibson Dunn. General information, not legal advice.
Founding clients
Three places this quarter, in return for publishing the results.
We're taking three founding clients for the Governance Sprint at a reduced fee. In return, we publish the measured before-and-after results as a case study, named or anonymised, your choice.
Start today
Get the policy template.
The same plain-English structure we use in the Sprint, ready to adapt for your firm.
Free download
The SME AI-use policy template
A two-page, plain-English policy you can adapt in an afternoon: approved tools, a traffic-light data rule, human review, transparency and training. Written for Irish SMEs.
Here it is
Download the AI-use policy template (PDF). We've also emailed you the link.
Common questions
Is this legal advice?
No. Zenchise provides practical governance and operational support. Where you need a legal opinion, we'll say so and work alongside your solicitor.
We only use ChatGPT and Copilot. Do we need governance?
Yes, but it can be light. Most firms carry unmanaged risk from staff using personal AI accounts with client or company data. A short policy, a tool register and basic training fix most of it, and they're linked to better results from AI.
How much of our time does the Sprint take?
Around four hours of your leadership's time over three weeks, plus 10 minutes per staff member for the survey.
Do you work with UK firms?
Yes, online or on-site. The UK has no AI Act: AI use is governed by UK GDPR, ICO guidance on AI and data protection, the Data (Use and Access) Act 2025 and your sector regulator. The EU AI Act can still apply to a UK firm that places AI systems on the EU market or whose AI output is used in the EU. We map both.
Which sectors do you work with?
Professional services, healthcare and care providers, education, manufacturing and distribution, and SMEs generally. To avoid conflicts of interest, we don't work with banks or payment firms.
Next step
Know where you stand in 30 minutes.
Book a 30-minute briefing and we'll walk through your current AI use, the rules that apply and the quickest wins.