You use AI in your business
If your teams use tools like ChatGPT, Copilot, Gemini, or software with built-in AI features, you already have AI governance questions to answer — even if you never 'bought an AI system'.
What this usually means
You are likely a business using AI, which the law treats as its own role with its own duties. Your responsibilities focus on how AI is used: which tasks, which data, who checks the outputs, and what you tell people. Rules differ by country and by use case — there is no single global checklist, and the EU AI Act does not automatically apply to every company.
Typical gaps we see
No inventory of where AI is used; staff pasting confidential data into public tools; no one assigned to check AI outputs; no policy for what AI may be used for; vendors whose AI features were switched on without review.
What good looks like
A simple AI usage inventory, a one-page usage policy, basic staff guidance, and a habit of checking AI outputs before they affect customers, money, health, or legal matters. Higher-impact uses may add legal obligations — our screening helps you see where you stand.