AI governance templates for UK businesses

Your team is already using AI. This gives them the rules.

• 9-page AI acceptable use policy in ISO management-system format
• One-page staff quick reference to pin up or circulate
• Staff sign-off form for your training and HR records
• 8-step implementation guide for issuing the policy

Owner-managers and HR generalists, 5–250 people.

One document covering how your business governs AI. Ready to issue, ready to audit.

• Manual in ISO management-system format, covering scope, roles and controls
• Responsibility matrix naming who owns each part
• Document control page with version history and approval
• Index linking the manual to your supporting registers and records

Businesses that want a single issued document describing how they govern AI.

Your AI tools carry real risks. See them, score them, control them.

• Register pre-populated with 20 AI risks across data, legal, operational and reputational areas
• Likelihood and impact scoring scale, with each level defined
• Existing controls and further action columns against every risk
• Review log recording who last reviewed the register and when

Owner-managers and operations leads who need a written view of where AI could go wrong.

AI law is moving fast. This keeps you on top of what applies to you.

• Register of the UK legislation, regulation and regulator guidance that bears on business AI use
• A column for how each item applies to you and who owns it
• Status and review-date fields so nothing sits unchecked
• Horizon-scanning log for recording changes as they land

Owner-managers who want one place recording what applies to them and when they last looked.

Forty questions to ask before a new AI tool touches your data.

• 40-question assessment covering data, fairness, transparency and human oversight
• Screening step for deciding when a full assessment is needed
• Mitigation and residual risk record against each concern raised
• Sign-off page with reviewer, decision and date

Businesses introducing an AI tool that touches personal data or affects decisions about people.

Is personal data going into ChatGPT? Is that legal?

• Checklist covering lawful basis, transparency, data minimisation and retention for AI use
• Questions on international transfers and vendor sub-processors
• Prompts for your records of processing and privacy notice wording
• Evidence and action columns against every item

Owner-managers and data protection leads whose staff put company or customer data into AI tools.

Before your team installs another AI tool, someone needs to ask the right questions.

• Supplier questionnaire covering data handling, model training and sub-processors
• Tool assessment form with an approve, restrict or decline decision record
• Approved AI tools register to keep on file
• Request-to-use form for staff proposing a new tool

Whoever signs off software in a business where staff keep finding new AI tools.

Hire for AI fluency without guessing what to ask.

• Job description templates covering AI fluency at three role levels
• Structured interview question bank with scoring guidance
• Practical AI task exercise and a marking rubric
• Onboarding checklist for a new hire's first weeks with your AI tools

Owner-managers and hiring managers recruiting into roles where AI tools are part of the job.

'All staff have been trained.' Can you prove it?

• Training record by person, with course, date and trainer fields
• Competence matrix mapping roles to the AI skills each one needs
• Training needs analysis sheet
• Attendance and sign-off sheet for group sessions

Owner-managers and HR generalists who need evidence that the training happened.

Employment law has changed. This walks you through what it means for your paperwork.

• Checklist of the employer duties the Act introduces, taken one at a time
• A column for how each item applies to your business and who owns it
• Status and evidence fields against every item, so a gap is visible rather than assumed

UK employers checking their contracts, policies and procedures against the Act.

Having an AI policy is one thing. Knowing whether anyone follows it is another.

• 65 audit questions grouped by governance area
• Evidence column for recording what you actually saw
• Conformity rating and findings fields against each question
• Audit report template with a corrective action summary

Whoever is asked to check the policy is being followed — usually the owner or an operations manager.

When it goes wrong, you need a record — and a fix.

• Incident log with date, reporter, tool involved and description fields
• Severity classification with each level defined
• Root cause and corrective action fields, with owners and due dates
• Closure record and an effectiveness check on the fix

Any business that wants a written record when an AI tool causes a problem.

'We take AI governance seriously.' Prove it with numbers.

• Objective-setting sheet with owner, target and review date for each objective
• Worked example measures for AI governance, to adapt to your business
• Progress tracker with a status field per period
• Reporting summary sized for a management review

Owner-managers who want AI governance measured rather than asserted.

The three documents every UK business needs to govern AI — policy, risk, audit.

• The AI Acceptable Use Policy Pack in full
• AI Risk Register, pre-populated with 20 risks
• AI Internal Audit Checklist, 65 questions
• Saves £26 against buying the three separately

Owner-managers wanting a framework without hiring a consultant.

Eleven templates. Policy to audit to GDPR. One download.

• All eleven individual templates, from the policy pack through to audit and GDPR
• Every document editable in Word, with a PDF copy of each
• Registers, forms and logs that cross-reference one another
• One download, ordered by governance area

Businesses that want the whole document set in one purchase rather than template by template.