Outsourcing IT doesn't outsource the obligation. See what the law expects →
Governance you can fill in
on one page.
Every template here is a job aid, not a form to submit. Print it, fill it in, and you have the beginning of a record. Keep it current on a cadence and you have a program, because governance is an ongoing program rather than a one-time audit.
A blank AI system register and the eight questions a board can ask about any AI system — on one printable page.
WHY? Fill this in once and you have a record your board can read out loud. Keep it current and you have a program.
Govern what each AI agent is permitted to do — one fill-in page per agent, plus the autonomy ladder.
WHY? A standard AUP governs people, not autonomous agents. Use it to give each AI agent a written job, an accountable owner, and an autonomy level — before it acts on your systems.
Ten plain-English questions to ask any AI-agent vendor before you buy — with good-answer and red-flag guidance.
WHY? You can't build agent controls into a vendor's product — so make them prove they did. Use it before buying any AI-agent product to surface identity, kill-switch, and data risks a demo hides.
Ten questions for the managed provider who already holds your systems, with the same good-answer guidance.
WHY? Your MSP's platform ships AI features you did not choose. Use it to find out what runs on your endpoints, who reviews it, and who is accountable when it misfires.
The transparency artifact an MSP hands clients before being asked, covering AI features, review and escalation.
WHY? Clients are starting to ask what AI runs inside a managed service. Use it to answer that unprompted, as a trust asset rather than a compliance chore.
The recurring record: what changed this quarter, which agents were added, what was reviewed and by whom.
WHY? A single dated report proves you looked once. Use it to show the cadence, which is what turns an assessment into a program.
Four 45-minute modules plus an “Access Denied” tabletop — the full governance-as-process playbook.
WHY? Governing AI agents is a new literacy no one was trained for. Use it to run your team through the full playbook in an afternoon — building a register, per-agent AUPs, and an “Access Denied” incident drill.
Educational templates, not legal advice or a compliance certification.
What a filled-in register makes possible
A regulator, an underwriter, or a director will ask for the register before asking for anything else. A register with named owners against each entry is the fastest way to answer that first question well — and the eight questions a board can answer with these artifacts show where each answer lives.