Start with a Review ↗
Home / PUT CONFIDENCE INTO PRACTICE

Clear rules. Prepared people.

AI governance should help your team make better decisions about AI. We help UK SMEs turn scattered use into an approach people can understand and follow.

By GOOD TO GO · Updated 14 September 2026

Start with the work people actually do

We begin with discovery and risk assessment. A policy is useful only when it reflects your tasks, information, customers and tools. We agree the delivery scope and identify a senior sponsor and an internal owner who can keep it working.

The stages of the programme

  • Discover and assess. Complete the Review and agree the priorities with leadership.
  • Design the rules. Adapt the AI policy, data boundaries, approval process and responsibilities to your business.
  • Prepare your people. Explain safe use, verification, confidential information and escalation through practical staff training.
  • Test and hand over. Walk through real use cases, address gaps and equip your internal owner to maintain the approach.

The foundations we put in place

  • Tailored AI acceptable-use policy and data-handling guidance.
  • A tool approval process and recorded responsibilities.
  • Human oversight requirements for significant outputs and decisions.
  • Incident escalation procedures and a clear reporting route.
  • Practical staff training and guidance for everyday work.
  • Registers, review processes and handover for the internal owner.

A trained owner, not a forgotten document

Your internal owner needs to know how to review a new tool, update the use register, record a concern and ask for specialist help. Handover uses practical examples so the owner can apply the process after the engagement ends.

We agree the owner’s responsibilities, response times and review schedule with you. The organisation remains responsible for its decisions and for keeping controls in use.

How much of your time will it take?

Eight weeks describes the delivery window, not eight weeks of daily consultancy. We schedule interviews, decision meetings, training and follow-up, with intervals for staff responses and approvals. Delayed information or a change in scope can affect the schedule; the proposal records the agreed expectations.

How we decide whether you are ready

We assess evidence against the six GOOD TO GO checks within the agreed scope. A policy alone is not enough: people must understand it and the controls must work. Significant unresolved risks prevent a readiness sign-off for the affected scope.

Review first, if you are unsure

Most businesses start with the Good to Go Review from £5,000. It gives you the evidence to decide how much governance support you need.