Guide AI with intent.AI should be governed, not simply adopted.
We help you enable AI safely and responsibly by operationalizing the EU AI Act, NIST AI RMF and ISO/IEC 42001 - end to end, from risk classification to incident response.
Ten capabilities. One operating model for AI.
AI governance consulting that evaluates your AI portfolio against the EU AI Act, NIST AI RMF, and ISO/IEC 42001, then delivers the policies, oversight structures, model risk controls, and audit-ready evidence needed to pass review and audit.
AI Value Portfolio Design & Strategic Roadmapping
Risk-weighted AI portfolio prioritization tied directly to revenue growth, cost reduction, and customer experience improvement. Transform AI governance from a compliance checkpoint into a strategic accelerator that unlocks faster time-to-market, higher customer trust, and competitive differentiation.
AI Procurement & Vendor Risk Assurance
Embed AI risk assessments into RFPs and vendor selection criteria, ensuring third-party AI systems meet your compliance standards before contract signature - avoiding downstream remediation costs and deployment delays.
EU AI Act Risk Classification
Per-system assessment under the EU AI Act’s risk categories, including prohibited, high-risk, limited-risk, and minimal-risk uses, plus the obligations for general-purpose AI models. Includes an article-by-article mapping of applicable requirements for technical documentation, logging, transparency, human oversight, and conformity assessment. Example finding: “your tenant scoring model is classified as high-risk under Annex III; here is the applicable conformity pathway.”
ISO/IEC 42001 ISMS for AI
Gap analysis against ISO/IEC 42001, design of the AI management system clauses and controls, and the documentation and evidence needed to succeed in a certification audit. Structured in the familiar ISO 27001 management-system format that procurement teams already recognize.
NIST AI RMF Mapping
End-to-end alignment of your AI lifecycle with the Govern, Map, Measure, and Manage functions of the NIST AI Risk Management Framework, including the Generative AI Profile (NIST AI 600-1). Covers the evidence register, control ownership, and the operating rhythm needed to keep the framework effective in production.
Model Risk Management
A model risk policy designed for LLMs and agentic AI, in addition to deterministic ML. Includes a tiered model inventory, challenger-champion governance patterns, validation cadence, and integration with second-line risk functions in regulated sectors.
Data Governance & Lineage
Governance focused on the data layer: establishing provenance, lineage, retention, residency, PII handling at integration points, consent controls, and the evidence trail regulators expect across training and inference data.
Evaluation & Guardrails
Outputs assessment , setting prompt and content safeguards, defining approval rules for agent actions, and establishing production monitoring to detect drift, misuse, and policy breaches.
Incident Response & Reporting
AI incident preparedness and response services covering escalation paths, serious incident reporting obligations (including EU AI Act Article 73 obligations for high-risk systems) and operational playbooks for fast triage and remediation when issues arise.
Training & Operating Model
Role-based training for engineering, product, legal and risk teams on the EU AI Act, NIST AI RMF and ISO/IEC 42001. An operating model and RACI that keep AI governance active as the portfolio grows. Designed as an ongoing capability, not a one-time workshop.
Different ways to engage. All leave you audit-ready.
B2B Consulting/Advisory Contract
A scoped engagement led by a senior AI governance and responsible growth professional.
Fractional Chief AI Officer
An embedded expert acting as your interim chief AI lead.
Bespoke Engagement
A program designed around your specific needs and goals.
Simeon Todorov, AIGP, CIPP/E
You Govern AI is led by a certified AI governance practitioner with hands-on experience across regulated industries in the EU and UK. His experience spans enabling audit, compliance and risk functions within organizations to leverage data-driven insights and capabilities, driving significant improvements in their data and operational maturity. By previously being a product manager in a large fintech and currently consulting organizations navigating the global regulatory landscape of AI, Simeon's diverse background makes him uniquely positioned to transform compliance obligations into measurable and responsible growth.
Book your AI Governance and Growth Enablement consultation.
30 minutes with a senior practitioner. You'll leave with a clear read on your regulatory exposure and a concrete first step — whether or not we work together.