AI Governance

Helping boards govern artificial intelligence with confidence

Boards no longer govern technology. They govern organisations. When AI shapes the decisions directors make and the risks they oversee, governance becomes the most critical capability your organisation can build.

Why AI governance matters now
$500M+
Combined losses from AI failuresfrom 13 documented real-world cases across industries
75%
Knowledge workers using Shadow AIunapproved tools already touching customer and regulated data
0
Accountability disappears when AI causes harmit transfers — to the organisation, the board, and those who failed to oversee it
Expertise in
Board-level AI governance Director accountability frameworks Shadow AI risk AI governance programmes ESG & environmental impact of AI
Why It Matters

AI is the most significant governance challenge since Cadbury

Artificial intelligence is no longer a technology issue. When it shapes the information directors rely on, the risks they oversee, and the decisions they make, it becomes a constitutional matter for the board.

The strategic question has shifted from "How quickly can we adopt AI?" to "How effectively can we govern it?" Boards that fail to answer that question are accumulating legal, reputational, and operational exposure — often without knowing it.

The organisations most at risk are not those deploying the most advanced AI. They are those deploying AI without adequate governance frameworks around it.

See how we help
13+
Real-world AI failure cases documented
$500M+
Combined losses cited across cases
75%
Workers using unapproved AI tools
1×
Recurring root cause behind every failure
What We Do

Four ways we work with boards and governance teams

Each engagement is designed for board-level audiences — no technical background required.

🏛️

Board Advisory & Briefings

Direct advisory support for boards navigating AI governance.

  • AI risk briefings for boards and audit committees
  • Accountability and legal exposure reviews
  • Board-ready AI governance assessments
  • Pre-deployment governance sign-off
🗂️

AI Governance Frameworks

Building the governance structures organisations need to manage AI responsibly.

  • AI governance maturity assessments
  • Policy and acceptable-use frameworks
  • Shadow AI discovery programmes
  • Risk register and reporting integration
📚

Training & Workshops

Practical, non-technical education for boards and senior leadership teams.

  • Board AI literacy workshops
  • Company secretary AI governance programmes
  • Director duties in the AI age
  • AI risk & accountability masterclasses
🎤

Speaking & Keynotes

Engaging, evidence-based keynotes for governance conferences and leadership events.

  • Governance conference keynotes
  • Company secretary institute events
  • Board leadership forums
  • In-house leadership days
Feature 01

How AI-ready is your board?

Ten questions. Five minutes. A clear picture of where your organisation stands on AI governance — and what to prioritise next.

Answer honestly. This is a diagnostic, not a test. The result will indicate your current governance maturity level and the actions most likely to move you forward.

🔒 No data is stored or transmitted

Designed for board directors, company secretaries, and governance professionals. No technical knowledge required.

Question 1 of 10
Loading...
0
/ 10
Accountability for AI harm does not disappear because the decision was made by an algorithm. It transfers — to the organisation that deployed the system, the board that authorised it, and those who failed to exercise adequate oversight.
— AI Accountability Board Briefing, June 2026
How We Work

A structured path from exposure to confidence

01 — Discover

Understand your exposure

We map your organisation's current AI activity, governance gaps, and accountability risks — producing a clear picture of where you stand.

02 — Design

Build your framework

We design the governance structures, policies, and oversight mechanisms your organisation needs — calibrated to your size, sector, and risk appetite.

03 — Embed

Implement with the board

We work directly with boards and governance teams to embed the framework into board-level reporting, director accountability, and operational practice.

04 — Sustain

Evolve as AI evolves

The regulatory landscape is moving fast. We provide ongoing advisory support to keep your governance current and your board informed.

Feature 02

AI Governance Tracker

Regulatory developments, enforcement actions, and AI incidents — curated for boards and governance professionals.

Updated regularly
Jun 2026

ICO issues £4.2M fine for AI-driven profiling without adequate human oversight

A UK financial services firm was fined after its AI system made automated credit decisions on over 200,000 customers without meaningful human review, breaching UK GDPR Article 22. The board was cited for failing to implement appropriate safeguards despite prior audit recommendations.

Enforcement
Jun 2026

EU AI Act high-risk system obligations now in force for financial services

Financial institutions deploying AI systems classified as "high-risk" under the EU AI Act are now required to maintain conformity assessments, technical documentation, and human oversight mechanisms. Boards must confirm compliance or risk enforcement action.

Regulation
May 2026

Recruitment AI flags 40,000 candidates incorrectly — class action filed

A global logistics company faces a class action after its AI recruitment system systematically rejected candidates based on proxy characteristics including postcode and name. The firm's board had approved the system without independent bias testing.

AI Incident
May 2026

FRC publishes guidance on AI use in financial reporting and audit

The Financial Reporting Council has issued guidance requiring audit committees to understand and disclose material uses of AI in the preparation of financial statements. Boards are advised to review their AI disclosure frameworks ahead of year-end reporting cycles.

Guidance
Apr 2026

NHS trust halts AI diagnostic tool after misdiagnosis rate exceeds threshold

An NHS trust suspended a commercially-procured AI diagnostic system after internal audit revealed a misdiagnosis rate three times higher than the vendor-stated figure. The trust's board was not informed of the discrepancy for six months following initial discovery.

AI Incident
Apr 2026

UK government publishes voluntary AI governance code for FTSE 350

A new voluntary code of practice for AI governance has been published for FTSE 350 companies, covering board oversight responsibilities, AI risk disclosure, and minimum standards for AI procurement. Voluntary status is expected to be reviewed in 2027.

Regulation
Feature 03 — The Book

Governing Artificial Intelligence — read it as it's written

Don't wait for the finished book. Register and receive chapters as they're completed — building your governance knowledge now, alongside the manuscript.

Working Manuscript · Draft 1

Governing Artificial Intelligence

A practitioner's guide for boards, directors & company secretaries
Manuscript progress
35% complete · 4 of 10 chapters in draft

Free to registered readers. Unsubscribe anytime.

Part I — Understanding AI
1
The AI Revolution
Available
2
AI and Corporate Governance
Available
3
The Environmental Cost of AI
Available
Part II — AI Risks
4
Shadow AI
Available
5
When AI Goes Wrong
Coming July
6
Accountability for AI Harm
Coming Aug
Part III — Governing AI
7
Governance Frameworks
Coming Sep
8
Directors' Duties
Coming Oct
9
The Company Secretary
Coming Nov
10
Building an AI Governance Programme
Coming Dec
Feature 04

The CruX Briefing

A monthly brief for boards and company secretaries. One regulatory development. One AI failure. One governance action point. Written in plain English — ready to share with your board.

No jargon. No padding. Just what you need to know, and what to do about it.

  • One regulatory development every month — what it means for your board
  • One AI incident dissected — the governance lesson inside it
  • One action point — something concrete to take to your next meeting
  • Board-ready language throughout — share it directly
  • Free, forever. No upsell.
Sample — The CruX Briefing June 2026

EU AI Act high-risk obligations are live

Financial services boards must now confirm their AI systems are classified, documented, and supervised. Non-compliance carries fines of up to €30M or 6% of global turnover.

ICO fines firm £4.2M for automated decisions without oversight

The board approved the system. The board bore the consequences. The lesson: approval without oversight is not governance — it is exposure.

Ask your executive team one question this month

"Which AI systems are making or influencing consequential decisions about people — and who is accountable for each one?"

Research & Insights

The briefings behind the practice

Original research and practitioner-focused papers developed for board and senior leadership audiences.

Board Briefing

Who is Accountable When an AI System Causes Harm?

The current accountability landscape — legal exposure, existing obligations, and the steps boards should take before harm occurs.

June 2026Accountability
Board Paper

Shadow AI: Governing Unsanctioned AI Use

Why shadow AI carries materially higher risk than shadow IT — and how to manage it with a 90-day discovery programme.

June 2026Risk
Case File

When AI Goes Wrong: 13 Cases Filed

From Zillow's $500M mispriced home-buying AI to discriminatory hiring algorithms — and the governance lesson in each one.

June 2026Case Studies
Research Briefing

The Hidden Thirst of Artificial Intelligence

How data centres behind every AI service reshape global water demand — and what this means for board-level ESG reporting.

June 2026ESG
Discussion Paper

AI and the Future of Corporate Governance

The five governance paradoxes of AI, the Governance Integrity Model, and the Company Secretary as governance intelligence hub.

June 2026Governance
Compiled Board Pack

AI Governance Board Pack

Risk registers, oversight frameworks, and accountability checklists compiled for board-level circulation.

June 2026Tools
Feature 05 — Transparency

How CruX uses AI — and how we don't

A governance practice that doesn't govern its own use of AI would be hard to take seriously. Here is exactly how we use AI at CruX, and the boundaries we hold.

We believe that demonstrating good AI governance is as important as advising on it. We use AI tools in our work — but within a framework of human oversight, transparency, and clear accountability.

Every output we produce for clients — every briefing, framework, assessment, or keynote — is reviewed, verified, and signed off by a human practitioner before it leaves CruX. AI assists our thinking. It does not replace our judgement.

  • 🔍

    Research & synthesis

    We use AI to scan regulatory updates, case law, and academic sources — saving hours of manual searching. A human practitioner selects, verifies, and interprets every finding.

  • ✍️

    First drafts

    AI may produce an initial draft of a briefing or paper. Every word is then reviewed, rewritten where necessary, and approved by a senior practitioner before publication or client delivery.

  • 📊

    Data analysis

    We use AI to identify patterns in governance data and case histories. All analysis is checked against primary sources before it informs any client recommendation.

  • 🚫

    What we do not use AI for

    We do not use AI to give legal advice, make client recommendations without human review, or process client confidential information through third-party AI tools without explicit consent.

Our AI governance principles

Human in the loop — alwaysEvery AI-assisted output is reviewed and approved by a named practitioner before it reaches a client or is published.

Transparency by defaultWe disclose where AI has contributed to our work. We do not present AI-generated content as purely human-authored.

No client data in unvetted toolsClient confidential information is never processed through AI tools that have not been reviewed and approved under our internal governance framework.

Accuracy before speedWe do not publish or deliver work faster because AI made it faster to produce. Our review standards are the same regardless of how content was generated.

We practise what we adviseOur internal AI governance framework mirrors what we recommend to clients — including an AI tool register, acceptable use policy, and quarterly review.

Who We Work With

Written for those who govern — not those who code

Our clients are the people responsible for ensuring AI is adopted and used responsibly across their organisations. No technical background required.

🏛️

Board Directors

Non-executive and executive directors who need to understand AI risk and their legal duties

📋

Company Secretaries

Governance professionals evolving into the board's AI governance integrator

⚠️

Risk & Compliance

Officers incorporating AI risk into existing frameworks and board reporting

👤

Senior Leaders

C-suite deploying or considering AI who need to understand the governance environment

⚖️

Legal Counsel

In-house and external lawyers advising boards on AI liability and regulatory exposure

Why CruX

Most AI governance commentary comes from technologists who don't understand governance, or generalist consultants who don't understand law.

CruX is different.

Founded by a dual-qualified solicitor and chartered company secretary, we understand the legal duties directors face and the governance mechanics of how boards actually work. That combination is rare — and in AI governance, it matters.

Start a conversation
Get In Touch

Start a conversation

Whether you need a one-off board briefing, a full governance programme, or a keynote for your next event — we'd like to hear from you.

All initial conversations are confidential and without obligation.

✉️
hello@cruxlaw.ai
📍
United Kingdom
📘
Book: Governing Artificial Intelligence — in development

We respond within one business day. All enquiries are confidential.