Platform
After the project, the Fidempli platform keeps it running
The managed service runs on the Fidempli platform, which launches in December 2026. You keep full access to your data, decisions and evidence at all times.
Explore the platform
AI Governance, Privacy & AI Security
Managed AI governance.
AI governance that runs every week, without building a new team for it.
The problem
AI governance is not a project with an end date. New tools, agents and use cases arrive every week, owners change, and accepted risks expire. Someone has to keep up.
Few organisations have the people to review AI requests, watch for shadow AI, chase owners and prepare evidence on top of their day jobs. When that work slips, the register goes stale and the next audit or authority request becomes a scramble.
What we do
Managed AI Governance
- Onboard
We agree scope, roles, approval limits and reporting with you, and take over your existing AI register and policies.
- Run intake
We review new AI requests, pre-classify them by EU AI Act tier, check vendors and route decisions to your named approvers.
- Monitor
We watch for shadow AI, ownerless agents, failing controls and expiring exceptions, and follow up with the owners.
- Keep evidence current
We collect and maintain evidence for each AI system and obligation, so it is ready when an auditor or authority asks.
- Report to the board
We prepare regular reports on AI risk, open findings and decisions for management and the board, on the schedule you set.
How we deliver
Consulting · Professional services · Managed services
Consulting
We help you decide which governance tasks to keep in-house and which to hand to us, and set the rules we work by.
Professional services
We set up the platform, workflows and reporting that the managed service runs on.
Managed services
We run intake, monitoring, evidence and board reporting for you, while decisions stay with your named owners.
AI automation in this service
- Automated EU AI Act pre-classification of new AI requests, reviewed by our consultants before routing.
- Automated discovery of new AI apps and agents from Microsoft 365, Entra and Defender data, with alerts for unapproved use.
- Automated collection of evidence and generation of board reports from the decision log.
What you get
- Current AI inventory with owners
- Reviewed and routed AI requests with recorded decisions
- Findings and follow-ups on shadow AI, agents and exceptions
- Evidence packs for audits and authority requests
- Regular management and board reports on AI risk
Frameworks
Frequently asked questions
Who makes the decisions?
You do. We prepare, review and route requests, but approvals and accepted risks stay with your named owners.
Can we start before the platform launches?
Yes. We can run the service with your existing tools and move it to the platform when it launches in December 2026.
How often do we get reports?
We agree the reporting schedule and format with you during onboarding, for example monthly for management and quarterly for the board.
Can we bring governance back in-house later?
Yes. Your data, workflows and evidence stay in your platform tenant, so your team can take over at any time.
Does this replace our data protection officer or CISO?
No. We support them with the daily governance work, and they keep their responsibilities and reporting lines.
More services in this pillar
Start with a 30-minute AI risk conversation.
A senior consultant replies within one business day. Or join the 3–5 design partners shaping the platform before launch.