PL
Vertical

AI Governance & Law

The dedicated AI&Scale vertical for boards, legal, risk and governance leaders — translating regulation into board-level decisions, accountability structures and practical compliance.

Board-level modules

Three practical building blocks for moving from AI ambition to governed, accountable scale — each grounded in a deeper analysis.

01

Board accountability structure

Define who owns AI decisions, who approves deployment, and who escalates when a model behaves unexpectedly. Accountability for AI cannot be delegated to IT — it needs a named owner at board level and a documented escalation path.

Read the deep-dive →
02

EU AI Act implications

Classify your AI systems by risk tier, map obligations to the Act’s compliance timeline, and identify which use cases fall under high-risk requirements. The cost of late classification is retrofitting governance under regulatory pressure.

Read the deep-dive →
03

Operating governance & vendor risk

Build an AI policy that survives audit: model monitoring after deployment, vendor due diligence for high-risk systems, and a register of where AI touches decisions. Governance that exists only on paper fails the first real scrutiny.

Read the deep-dive →

What we cover

  • 01How boards should structure accountability for AI decisions.
  • 02What the EU AI Act means for risk classification and timelines.
  • 03Designing internal AI policy that survives audit and scrutiny.
  • 04Vendor due diligence for high-risk AI systems.

Latest analysis

Who Owns AI Decisions in the Company?AI Governance & Law · Lead Analysis

Who Owns AI Decisions in the Company?

The biggest AI risk in organizations is not always model error. It is often an accountability error: a situation where a system influences a business decision, yet nobody can clearly say who approved the risk, who own…

2026-06-01·12 min read
EU AI Act for Boards: What You Really Need to KnowAI Governance & Law · Policy Watch

EU AI Act for Boards: What You Really Need to Know

The EU AI Act is not a topic only for legal teams. For boards, it is a test of whether the company can manage AI as a system of decisions, risk, and accountability, rather than as a set of fragmented technology experi…

2026-06-01·12 min read
AI Governance Is the Operating System of ScaleAI Governance & Law · Lead Analysis

AI Governance Is the Operating System of Scale

In many companies, governance enters AI conversations as a synonym for delay: committees, forms, and caution. That diagnosis is wrong. Well-designed AI governance does not slow innovation; it removes decision uncertai…

2026-06-01·15 min read
How to Assess AI Reputational RiskResponsible AI · Board Brief

How to Assess AI Reputational Risk

AI reputational risk rarely starts with the simple fact that a model made a mistake. It starts when the mistake is perceived as unfair, unexplained, privacy-invasive, concealed, or aligned with a broader pattern of po…

2026-06-01·11 min read
Responsible AI as a Condition for Trust, Not a PR FunctionResponsible AI · Lead Analysis

Responsible AI as a Condition for Trust, Not a PR Function

Responsible AI becomes a test of organizational maturity not when a company publishes ethical principles, but when it faces a difficult decision: limit automation, improve data, pause deployment, change communication,…

2026-06-01·11 min read
Vendor Due Diligence in Enterprise AIAI Governance & Law

Vendor Due Diligence in Enterprise AI

Selecting AI vendors without governance discipline creates hidden risk. Here is the executive due diligence model.

2026-05-14·8 min read
How Internal Audit Should Test AI ControlsAI Governance & Law · Playbook

How Internal Audit Should Test AI Controls

In many organizations, internal audit has received a new mandate: assess whether AI controls are truly effective, not only formally documented. This challenge is qualitatively different from classic IT audits. AI syst…

2026-06-01·7 min read
An AI Policy That Gets Used, Not Just SignedAI Governance & Law · Playbook

An AI Policy That Gets Used, Not Just Signed

Many companies already have an AI policy. The problem is that the document often lives mostly in the intranet, not in day-to-day work. Employees sign it, managers confirm it, compliance archives it - and decisions are…

2026-06-01·8 min read
20 Contract Clauses That Should Be the AI Procurement StandardAI Governance & Law · Policy Watch

20 Contract Clauses That Should Be the AI Procurement Standard

This article is step 2/3 of the AI procurement process: drafting contract clauses. Step 1 (vendor assessment) is covered in governance-ai-vendor-due-diligence, and step 3 (process gates) in governance-ai-procurement-c…

2026-06-01·8 min read
AI Red Teaming: What and How to Report to the BoardAI Governance & Law · Board Brief

AI Red Teaming: What and How to Report to the Board

In many companies, AI red teaming is treated like a one-time security test: run an exercise before launch, record a few conclusions, and return to the product roadmap. The problem is that AI systems change over time:…

2026-06-01·7 min read
How to Build an AI Risk Committee That WorksAI Governance & Law · Playbook

How to Build an AI Risk Committee That Works

An AI Risk Committee should shorten the path from idea to safe scale, not lengthen it through additional formality layers. If the committee has no real decision mandate, clear agenda, escalation thresholds, and impact…

2026-06-01·8 min read
AI Vendor Due Diligence: Questions Companies Still MissAI Governance & Law · Playbook

AI Vendor Due Diligence: Questions Companies Still Miss

This article is step 1/3 of the AI procurement process: vendor assessment. Step 2 (contract clauses) is covered in governance-ai-procurement-contract-clauses, and step 3 (process gates) in governance-ai-procurement-co…

2026-06-01·9 min read
Shadow AI: the biggest risk hidden from strategyAI Governance & Law · Lead Analysis

Shadow AI: the biggest risk hidden from strategy

Shadow AI rarely starts with bad intent. It starts with time pressure. An employee wants to prepare a proposal faster, a manager wants to shorten analysis time, sales wants to respond to clients faster, HR wants to st…

2026-06-01·10 min read
Making AI Fairness Operational: Measurement, Limits, and GovernanceResponsible AI · Playbook

Making AI Fairness Operational: Measurement, Limits, and Governance

Fairness in AI sounds good on a slide, but in practice it becomes a difficult sequence of decisions: what we consider fair, for whom, under what data quality, and at what business cost. That is why fairness is not a s…

2026-06-01·7 min read
AI Incident Response: What to Do When a Model FailsAI Governance & Law · Operator Notes

AI Incident Response: What to Do When a Model Fails

An AI incident does not look like a classic system outage. Often everything appears to "work" - API responds, dashboards are green - yet the company is still losing: the model returns harmful recommendations, escalate…

2026-06-01·5 min read
AI System Inventory: The Simplest First Governance StepAI Governance & Law · Playbook

AI System Inventory: The Simplest First Governance Step

Most AI governance programs start with policies and end with firefighting. Teams produce documents, yet the organization still cannot answer basic questions: which AI systems exist, who owns them, which are high risk,…

2026-06-01·7 min read
AI Procurement Controls: How Not to Buy Risk with the ToolAI Governance & Law · Policy Watch

AI Procurement Controls: How Not to Buy Risk with the Tool

This article is step 3/3 of the AI procurement process: control gates and process enforcement. Previous steps are covered in governance-ai-vendor-due-diligence and governance-ai-procurement-contract-clauses.

2026-06-01·6 min read
How to Report AI Risk to the BoardAI Governance & Law · Board Brief

How to Report AI Risk to the Board

The biggest mistake in AI risk reporting is giving the board lots of information and very few decisions. Reports are full of technical terminology, model descriptions, and long control lists, but they fail to answer t…

2026-06-01·6 min read
The evidence base

AI Leadership & Governance in CEE 2026

The first benchmark for AI maturity, governance and leadership across Central and Eastern Europe.

View the benchmark →

Assess your board’s AI governance readiness

A structured diagnostic for boards moving from AI pilots to governed, accountable scale.

Explore the diagnostic →