Managed AI Governance

We handle the AI governance work. You stay in control.

Every AI system with its risks identified, its controls defined and its evidence tracked, without adding headcount. AIQURIS takes on the work of an AI governance manager, with its platform and experts, and hands it over when your team is ready. Your team keeps full oversight and makes every go-live decision.

For legal, compliance, risk and IT teams that are already at capacity, and the business owners waiting for their decisions.

Your AI registerAlways current
Customer service AI agent
Live · moderate risk
AIQURIS keeps it current
Contract review AI assistant
Controls in place · low risk
You decide on go-live
Demand forecasting model
New · not yet reviewed
AIQURIS reviews it
AIQURIS does the workYour team makes the decisions
Specialist judgement

The questions that decide whether your AI is safe to use.

Keeping a list of your AI systems is the easy part. Answering these questions for every system, and again whenever something changes, takes specialist judgement and time.

“Everyone agrees AI needs human oversight and a way to stop it. Nobody tells you what that means for the system in front of you.”
What we hear from legal and compliance leaders
01
Customer chatbot
Germany
EU AI ActGDPRClient contract
Internal tool
Singapore
PDPAYour AI policy
Which rules apply?

Regulations, standards, your own policies and your clients’ contracts all set requirements. Which ones apply differs by AI system, sector and country.

02
A CUSTOMER SERVICE AGENT CAN…
Answer wronglyTreat unfairlyLeak dataBe manipulated
What can go wrong?

Every AI system can fail in dozens of ways, some likely, some rare, and not all of them are obvious.

03
THE SAME WRONG ANSWER
About opening hoursAnnoyance
About loan termsLiability
What happens when it fails?

The same failure can be a nuisance in one place and serious harm in another.

04
Typo in a summarySlow replyLeaked customer dataYour lineLive with itMust not happen
How much risk is acceptable?

Some failures you can live with; others must not happen. Where the line sits is your decision.

05
95%
✓ Sorting emails✗ Checking a medicine advert
1 in 20 wrong
Is 95% good enough?

Not always: it depends on what the system does. And a good test score says little about how it copes with real, messy input.

Get these answers wrong, and you either hold back useful AI or let risky AI through.

A named key expert is accountable for your account, and every high-risk AI system is reviewed by a senior expert before results reach you.

WHAT WE DO
We answer all five for every AI system, and keep the answers current.
01
Identify the rules that apply
02
Define the controls and evidence for each failure
03
Match controls to the stakes, at the right points in the AI lifecycle
04
Turn your risk appetite into go-live conditions
05
Set the tests and the results they must reach
The challenge

AI is spreading faster than your team can govern it.

From AI tools to AI agents

From personal productivity tools to agents and AI in operations, each with its own purpose, data and users. Each AI system carries its own risks, so different requirements apply and different controls are needed. A general AI policy does not say which ones apply to which AI system.

Your team is already at capacity

Legal, compliance, risk and IT teams are fully loaded with their day-to-day work. Hiring an AI governance manager takes months, and one person rarely covers safety, security, performance, legal compliance, ethics and sustainability.

Everyone asks for evidence

Regulators, auditors, the board and customers want evidence that your AI is under control. Each asks in its own way and at its own time.

Your AI policy sets the direction. Applying it to every AI system takes capacity few teams have. Meanwhile, AI projects stall in pilot or go live with risks nobody has checked.

What we take over

The work moves to us. The decisions stay with you.

Moves to us
  • Keeping one AI register: all your AI systems, their risks, controls and status
  • Identifying the risks and defining the controls for every new or changed AI system
  • Chasing evidence, flagging gaps and escalating what is blocked
  • Preparing a clear recommendation for every go-live decision
  • Following changes in the rules you have agreed, and what they mean for your AI systems
  • Drafting policy updates and reporting each quarter
Stays with you
  • One named contact, about two to four hours a week
  • Describing each AI system and making the right people available
  • Putting the controls in place with IT, security and the business
  • Telling us when an AI system, its data or its use changes
  • Approving and owning your policies
  • Every go-live decision, and accepting the remaining risk
PROGRAMMES AND MEMBERSHIPS
IMDA Spark CompanyAI Verify Foundation member

IMDA Spark Company · AI Verify Foundation member

STANDARDS COMMITTEES
ISO/IEC JTC 1/SC 42DINEnterprise Singapore · SMF

The team sits on the committees that write the AI standards.

RECENT RESULTS
  • PharmaAI agents in manufacturing: a clear go or no-go decision before roll-out, with the remaining risk known.
  • TelecomsCustomer service AI agents made safe, reliable and compliant, and ready for EU AI Act certification.
  • Public transportAI assistant bought from a vendor: its claims verified and the system ready to roll out.
The outcome

AI that goes live safely, with every decision on record.

INSTEAD OFPilots stuck between the business, legal, risk and IT

Decisions, not delays

Each AI system gets the controls it needs, and no more. Go-live decisions rest on a clear basis, not on guesswork.

INSTEAD OFA policy that stops at principles

Safe, reliable and compliant

Risks are known and controls are specified across safety, security, performance, legal compliance, ethics and sustainability, with the evidence on record.

INSTEAD OFA new exercise for every questionnaire

Answers ready when asked

Requirements from regulations, standards, your own policies and customer contracts sit in one AI register, a list of all your AI systems with their risks, controls and status. Requests are answered from one record, not rebuilt each time.

INSTEAD OFKnow-how that never reaches your team

Capability that stays

Your team learns the process as it runs and takes it over when ready.

Capacity now. Capability when you are ready.

Start with one AI system. Three weeks, then decide.

See the work we would take off your team, and what it costs, before you commit to more.

Levels of support

Choose your level. Step down as your team takes over.

Match the level to your capacity today, and change it as your team gains capability or you add AI systems. Typically far more cost-effective than building the capability in-house. The Sprint shows the comparison for your case. The AI register and the process carry over at every level.

Fully managed

AIQURISYour team
  • ✓AIQURIS runs the assessments, follows up the evidence and keeps the AI register current
  • ✓AIQURIS coaches your team as it goes
  • ✓Quarterly service review

Partly managed

AIQURISYour team
  • ✓Your team runs the assessments on the platform
  • ✓AIQURIS reviews the results, takes on complex cases and coaches
  • ✓Quarterly service review

Platform only

AIQURISYour team
  • ✓Your team runs everything on the platform
  • ✓Platform updates and a support desk
  • ✓Annual service review

Bars show the indicative share of the day-to-day work. Decisions stay with your team at every level.

When to step down: once your team runs assessments on its own and keeps the AI register current. As you add AI systems, you can return to a higher level of support.

Keep it, reduce it, or take it in-house.

How it works

AIQURIS runs the process. You own the decisions.

Managed AI Governance combines the AIQURIS platform with expert judgement. A low-risk AI system gets a light check. A high-risk one gets a full review.

Your teamDecides and implements
AIQURISPlatform and experts
Your team
Describe the AI system

Purpose, users, data and context.

AIQURIS
Identify risks and define controls

The platform identifies the risks, requirements and controls. Experts apply judgement.

Your team
Approve and implement

You approve the controls and put them in place.

AIQURIS
Check evidence and recommend

The platform checks the evidence and the remaining risk. Experts recommend.

Your team
Decide on go-live

You decide whether to accept the remaining risk.

AIQURIS
Keep it current

The platform updates the assessment when you report a change.

Shown for the fully managed level. In the partly managed level, your team runs the assessments in step 2 on the platform and AIQURIS reviews them.

NOT INCLUDEDTechnical monitoring of AI systems while they run, tools to detect unapproved AI use, legal opinions, incident response and certification. Where monitoring is a necessary control, it is specified for you to implement.
How it starts

Start with one AI system. Decide at every step.

01 · Sprint3 weeks

Assessment Sprint

One real AI system, with your stakeholders. You get its risks and controls, an action list with owners, and a clear view of the work we would take off your team and what it would cost compared with doing it in-house.

About the Sprint →
Your decision: continue, or stop with no further obligation.
02 · OnboardingAbout 2 months

Onboarding

Together we list your current and planned AI systems. Your policies and the standards and regulations that apply are set up on the platform. Your current AI systems are reviewed, starting with those that matter most.

Your decision: choose the level of support.
03 · Managed serviceOngoing

Managed service

AIQURIS reviews new and changed AI systems, follows up the evidence, keeps the AI register current and trains your team. A quarterly review tracks progress, including readiness for ISO/IEC 42001.

Your decision, at each review: keep, step down or step up the level of support.

You see results before you commit to more.

Questions

What teams ask before they start.

Still have questions?Ask us
Who is accountable for our AI?

You are. AIQURIS runs the process and recommends. Your team decides whether to accept the remaining risk and makes every go-live decision.

Can we take it in-house later?

Yes. The levels of support are built for it. Your team takes over step by step, and the AI register and the process carry over.

Can we end the service?

Yes. You can step down or end the service, and you can export your data at any time.

How much of our team's time does it need?

A named contact for about two to four hours a week, plus time from the people involved in each assessment. Implementing the controls takes time from IT, security and the business owners, depending on the actions.

Which requirements do you cover?

The regulations, standards and frameworks that apply to each AI system, your own policies, and the AI requirements your customers set. Each control is linked to its source.

Does this get us ISO/IEC 42001 certified?

Not on its own, but it builds much of what an ISO/IEC 42001 audit looks for. Each AI system that goes through the service adds to it: assessed risks, defined controls, evidence on record and a current AI register. Your maturity builds AI system by AI system, and every quarterly review shows what is still open. In ISO terms, AIQURIS runs the core processes of your AI management system: risk and impact assessment, controls, evidence and the AI register. You own the system. The certification audit itself is carried out by an accredited body.

Do you need access to our systems or data?

Not for the assessment itself. It is based on a description of the AI system. Access is needed only where a specific control calls for it, such as a penetration test or monitoring of the system in operation.

Where is our data held?

In your own separate environment on the AIQURIS platform, or in your own cloud if you prefer.

How is it priced?

By the level of support and the number of AI systems. After a first call, you receive a proposal.

What it covers

One service, whether you deploy, operate or buy AI, and whichever rules apply.

Each situation has its own AIQURIS solution. With Managed AI Governance, AIQURIS runs them for you, in one AI register.

One AI register for every AI question you face.

Get started

How many AI projects are coming in the next 12 months?

Tell us what is planned. In one call we map your AI systems, the level of support that fits and where to start.

Privacy Overview

We use cookies to operate our website, ensure its proper functioning, improve performance, analyse traffic, and support our marketing activities. Some cookies are strictly necessary and cannot be disabled. Others can be enabled or disabled below according to your preferences. For full details, please see our Privacy Policy.