The AI Governance Page Your Team Needs

AI governance starts with one page that names your tools, the data in each, and what the contracts allow.

The install takes minutes

I set up an AI tool for a friend’s team this month. The install took 20 minutes.

Reading what the vendor's terms allowed them to do with the team's data took two days.

The terms review took longer because the data use sits inside the vendor's contract. Start with the Data Processing Agreement guide when a vendor handles company data.

What the terms can allow

Somewhere in every company, an employee is pasting confidential data into a free AI tool whose clause nobody read.

The defaults on many tools allow uploads to be stored, reviewed, and used to improve the model. In this context, improve means train.

Pricing, customer lists, and unreleased plans can end up inside a product other companies query. Ending the subscription stops the future flow. Data already absorbed into a model has no delete button.

The one-page AI register

AI governance is one page with three fields for every tool:

• Which AI tools your company uses.
• What data goes into each tool.
• What each contract says about storage, training, and deletion.

Use the data inventory guide to name the data in each tool. Use the privacy-by-design guide when the tool enters a live workflow.

Where DPDP leaves the risk

I have never met a company that could produce this page on the first ask.

Under India's DPDP, the personal data in those prompts stays your liability after it leaves.

The AI company gets the data. You keep the risk. Read the storage limitation guide when the contract review reaches retention and deletion.

Build your AI register