Practical AI governance, not generic theory
Problem-led writing for regulated and data-sensitive firms — shadow AI, evidence, the gateway, and what each tool actually lets you prove.
What is AI governance? A practical guide for UK firms
AI governance is how an organisation decides which AI it allows, sets rules for its use, and can show what actually happened. Here is what it covers, what UK regulation expects, and where most firms have a gap.
21 July 2026 · 9 min read
Read article →What the FCA's Mills Review means for evidencing AI use
The FCA's Mills Review points to a future of more AI and more autonomy in financial services. That raises the bar on one question in particular: can you prove what your AI actually did?
14 July 2026 · 6 min read
Sector: LawYou bought a legal AI tool. You still don't have AI governance.
Harvey, Lexis+ and the new wave of legal AI apps do the work brilliantly — but each governs only itself. Firm-wide oversight of AI is a separate job, and it's the one the SRA actually asks about.
7 July 2026 · 8 min read
Shadow AIWhat is shadow AI? How to discover unapproved AI use
Shadow AI is the AI use no one approved and no one is tracking. Learn why it is your blind spot and how shadow AI discovery works from logs you already collect, with no endpoint agents.
23 June 2026 · 6 min read
EvidenceAI policy is not evidence: how to prove AI compliance
A written AI policy proves intent, not behaviour. See why regulators, clients and boards now expect a tamper-evident AI audit trail, and how to prove AI compliance with evidence rather than a document.
19 June 2026 · 6 min read
Sector: FCAHow to evidence AI use in an FCA-regulated firm
A step-by-step guide to capturing, recording and presenting evidence of AI use that stands up to file reviews, FCA queries and PI insurers.
16 June 2026 · 7 min read
Sector: LawAI and law firms: confidentiality, privilege and audit trails
Why AI use inside law firms threatens confidentiality and privilege, and how to keep it governed and provable for clients and the SRA.
12 June 2026 · 7 min read
PartnersHow MSPs can turn AI risk into a managed governance service
A practical guide to packaging AI discovery, control and evidence into a recurring managed service for your clients.
9 June 2026 · 7 min read
ConnectorsChatGPT Enterprise vs Team vs Free: what evidence can you actually get?
A clear look at what audit evidence each ChatGPT tier exposes, why Free, Plus and Team leave a gap, and the practical routes to close it.
5 June 2026 · 7 min read
ConnectorsMicrosoft 365 Copilot: what Purview covers and what still needs evidencing
How Microsoft Purview governs Copilot, where the gaps sit for a unified AI evidence record, and how Evaident complements it.
2 June 2026 · 7 min read
PolicyWhat to put in an AI acceptable-use policy
A practical, section-by-section guide to what an AI acceptable-use policy should contain, and why a policy only counts when paired with evidence.
29 May 2026 · 7 min read
Shadow AIHow to handle staff use of personal ChatGPT accounts
A pragmatic playbook for surfacing, routing, governing and evidencing staff use of personal AI accounts at work.
26 May 2026 · 6 min read
EvidenceWhen should you capture full prompts and responses, and when should you not?
A balanced guide to choosing metadata, preview, or full content capture, weighing evidentiary value against data-protection exposure.
22 May 2026 · 7 min read