AI Governance Pack
For founders, ops & compliance leads at AI-using SMBs

Hand an auditor a complete AI governance file.
Build it this afternoon — not in a £2,500 consultant engagement.

Go from "we use AI but have nothing written down" to a dated, owned, defensible governance file: an AI Acceptable Use Policy, a completed and dated staff training record, a pre-seeded risk register, an impact assessment, a governance charter, and a security-questionnaire answer kit — each cross-referenced to EU AI Act Article 4, ISO/IEC 42001 and the NIST AI RMF. About 15 minutes of answers; a file you'd be comfortable showing your board.

🔒 The generator runs 100% in your browser — nothing uploaded · 60-day money-back guarantee · Guidance, not legal advice

EU AI Act Art. 4 (AI literacy) ISO/IEC 42001:2023 NIST AI RMF 1.0 Print → PDF · copy to Word

The moment it stops being theoretical

A customer sends their vendor security questionnaire. This time it has an AI section. "Do you have an AI usage policy? Are staff trained on responsible AI use? Can you evidence your AI risk assessment on request?"

And you have… a few Slack messages and good intentions. Free template bundles give you blank documents. The compliance platforms cost £7,500+ a year. A consultant wants £2,500+ to start. Meanwhile the deal is waiting on your answer.

  • The training record is the killer. Anyone can download a blank AI policy. Almost nobody has a completed, dated AI-literacy training record — and that's exactly the artifact an auditor and a customer ask to see.
  • Free templates are worth what you paid. Generic, undated, unmapped, and identical to your competitor's. They don't survive scrutiny because they evidence nothing.
  • The platforms are built for someone else. £7,500–£20,000/yr governance tooling is priced for enterprises, not a 12-person agency that just needs a defensible file.

Why this is on the clock

This isn't a manufactured countdown. The obligation and the customer pressure are already real:

Since 2 Feb 2025

The EU AI Act's AI-literacy duty (Article 4) already applies to providers and deployers — with no grace period.

2 Aug 2026

The Act becomes generally applicable, including transparency obligations. High-risk application dates have since been shifted later under the AI omnibus.

Right now

Enterprise buyers are pushing AI-Act / ISO-42001 / NIST documentation down to their SMB suppliers through security questionnaires — a deal-blocker today, not in 2026.

Regulatory references re-verified against primary/authoritative sources on 2026-06-16. The Act can reach you even from the UK or US where your AI outputs are used in the EU — re-verify your own exposure with a qualified adviser.

Everything in the pack

One purchase. A complete, coherent governance file — plus the working tool that builds it for you.

Core tool

The AI Governance File Generator

A 100% in-browser tool that turns ~15 minutes of answers into six tailored, dated, clause-mapped documents — Charter, Acceptable Use Policy, AI-Literacy Training Record, Tool Inventory & Risk Register, Deployer Impact Assessment, and Security-Questionnaire Answer Kit. Print to PDF or copy-paste to Word. Runs client-side; nothing is uploaded.

The substance

The AI-Literacy Training Brief

A ready-to-deliver ~1-hour staff session — the real content behind your Article 4 training record, so the dated log is honest, not a hollow tick-box.

Your workflow

Fill-in templates

AUP, Charter, Impact Assessment and Questionnaire Kit in editable markdown/Word, every bracketed field marked, guidance call-outs inline — edit in your own tools if you prefer.

Pre-populated

The data registers (CSV)

A pre-seeded risk register with ratings, controls and clause mappings; the tool inventory and training-log registers; and a crosswalk mapping every obligation to Art. 4 / ISO 42001 / NIST AI RMF clauses.

Stays useful

Free updates as the law settles

AI regulation is moving (Art. 4 live since 2 Feb 2025; high-risk application dates changed under the AI omnibus). You keep the refreshed references and framework mappings — no subscription required.

The wedge

Security-Questionnaire Answer Kit

Honest, ready-to-paste answers to the AI section of vendor due-diligence questionnaires — drawn from your generated file, with a cover sentence for the top of the section.

What you walk away with

  • A governance file you'd be comfortable handing an auditor.
  • Honest, ready answers you can paste into a customer's security questionnaire without scrambling or overstating.
  • A completed, dated AI-literacy training record — the one artifact free bundles never give you.
  • A risk register pre-populated by your use cases, with high-stakes uses flagged for review.
  • A dated, version-controlled file you can show your board — built in about half a day, not weeks.

Simple, one-time price

Standalone value of the stack: £386
£149 one-time · no subscription

Founding price £149 for the first 100 buyers, then it rises to £199 and stays there. Honest, structural scarcity — no countdown timers, no fake stock counters.

Get the AI Governance Pack → Not sure yet? Run the free readiness checker first →
  • The AI Governance File Generator (the core tool)
  • The AI-Literacy Training Brief
  • Fill-in templates (AUP, Charter, Impact Assessment, Questionnaire Kit)
  • Pre-seeded CSV registers + framework crosswalk
  • Free updates as the staged dates and mappings are refined

The £386 anchor is the exact honest sum of the stack's standalone values (£149 + £99 + £79 + £59), not an inflated number.

The 60-day "put-it-in-place" guarantee

Run the generator, deliver the included AI-literacy training brief and log it, and build your dated governance file. If you don't end up with a file you'd be comfortable handing an auditor or pasting into a customer's security questionnaire, email within 60 days for a full, no-questions refund — and keep every file. We only win if you do. This guarantee is in addition to your statutory rights.

Questions, answered honestly

Is this legal advice?

No. Everything in the pack is editable guidance and self-assessment tooling, not legal advice, and its author is not a regulated law firm. The clause references (Art. 4, ISO/IEC 42001, NIST AI RMF) are signposts to help you locate the relevant requirements — they are not a certification of compliance. Have a qualified data-protection lawyer or compliance professional review your file before you publish it, send it to a customer, or rely on it in any regulatory matter.

Does this make me "EU AI Act compliant" or "ISO 42001 certified"?

No, and we won't pretend otherwise. The pack helps you organise and evidence your own AI governance and is aligned to these frameworks — that is not the same as certification, which only an accredited body can grant. No tool or template can make a prohibited or high-risk use compliant.

Is my data safe? What gets uploaded?

The generator and the free checker run entirely in your browser. There is no server, no account and no upload — your answers never leave your device. Close the tab and they're gone.

We're a small team and not a "tech" company. Is this for us?

Yes — it's built for AI-using SMBs (agencies, fintechs, healthtech, professional-services and EU-facing firms) that don't have a governance officer. Most small organisations are deployers (you use third-party AI tools), and the pack defaults to that, flagging the heavier obligations only if you build or ship an AI system.

What if I have a high-stakes AI use (hiring, credit, biometrics)?

The Deployer Impact Assessment will flag it as high-stakes and apply elevated controls — but it explicitly routes you to qualified legal/compliance review before you rely on it. The pack helps you document and prepare; it does not replace professional advice for high-risk uses.

How long does it actually take?

About 15 minutes of answers to generate the documents, and roughly half a day to deliver the training brief, log it, and review the file. Far less than one hour of a consultant's time.

What's your refund policy?

A 60-day, no-questions money-back guarantee — and you keep every file. See the guarantee above. It's in addition to your statutory rights.

Build your audit-ready AI governance file this afternoon

Get the AI Governance Pack — £149 → Or run the free readiness checker →