Free Resources

AI governance, frameworks & checklists.

Practical, ready-to-use frameworks for the work of AI governance. Organised by role, find what is relevant to your seat. Free, on-site, and built from regulatory primary sources. No sign-up, no download required.

Browse by role

What is relevant to your seat.

The same resource is often useful to multiple roles. Jump to the role-curated set, or scroll down for the full library.

Boards & CROs2 resources

Chief AI Officers2 resources

GRC Teams5 resources

General Counsel3 resources

Internal Audit2 resources

CISOs1 resource

Risk Practitioners4 resources

Procurement2 resources

For Boards & CROs

Visit the Boards & CROs hub

EU AI Act Readiness Checklist

A practical 40-point checklist covering scope assessment, classification, conformity assessment, technical documentation, and deployer obligations. Updated for August 2026 enforcement.

Compliance teams, legal, risk

Board AI Governance Question Kit

Twelve questions every board director should be asking about AI, paired with the answers that signal genuine governance and the answers that reveal gaps.

Directors, board secretaries, GCs

For Chief AI Officers

Visit the Chief AI Officers hub

SELF-ASSESSMENT

ISO 42001 Implementation Self-Assessment

Map your existing AI governance against ISO 42001 requirements. Identifies the gaps between your current state and certification readiness across all clause requirements.

Risk teams, compliance, certification leads

Board AI Governance Question Kit

Twelve questions every board director should be asking about AI, paired with the answers that signal genuine governance and the answers that reveal gaps.

Directors, board secretaries, GCs

For GRC Teams

Visit the GRC Teams hub

EU AI Act Readiness Checklist

A practical 40-point checklist covering scope assessment, classification, conformity assessment, technical documentation, and deployer obligations. Updated for August 2026 enforcement.

Compliance teams, legal, risk

SELF-ASSESSMENT

ISO 42001 Implementation Self-Assessment

Map your existing AI governance against ISO 42001 requirements. Identifies the gaps between your current state and certification readiness across all clause requirements.

Risk teams, compliance, certification leads

AI Usage Policy, SME Template

A one-page AI usage policy template for small and growing businesses. Covers approved tools, data rules, quality checks, and disclosure obligations.

SME owners, operations leads

AI Vendor Due Diligence Framework

Structured questionnaire for assessing third-party AI vendors before procurement. Covers technical documentation, bias testing, data processing, and contractual protections.

Procurement, legal, risk

AI Incident Response Playbook

Step-by-step playbook for responding to AI system failures: detection, escalation, regulatory notification, affected-individual communication, and post-incident review.

Risk, legal, operations

For General Counsel

Visit the General Counsel hub

EU AI Act Readiness Checklist

A practical 40-point checklist covering scope assessment, classification, conformity assessment, technical documentation, and deployer obligations. Updated for August 2026 enforcement.

Compliance teams, legal, risk

Board AI Governance Question Kit

Twelve questions every board director should be asking about AI, paired with the answers that signal genuine governance and the answers that reveal gaps.

Directors, board secretaries, GCs

AI Vendor Due Diligence Framework

Structured questionnaire for assessing third-party AI vendors before procurement. Covers technical documentation, bias testing, data processing, and contractual protections.

Procurement, legal, risk

For Internal Audit

Visit the Internal Audit hub

SELF-ASSESSMENT

ISO 42001 Implementation Self-Assessment

Map your existing AI governance against ISO 42001 requirements. Identifies the gaps between your current state and certification readiness across all clause requirements.

Risk teams, compliance, certification leads

AI Incident Response Playbook

Step-by-step playbook for responding to AI system failures: detection, escalation, regulatory notification, affected-individual communication, and post-incident review.

Risk, legal, operations

For CISOs

Visit the CISOs hub

AI Incident Response Playbook

Step-by-step playbook for responding to AI system failures: detection, escalation, regulatory notification, affected-individual communication, and post-incident review.

Risk, legal, operations

For Risk Practitioners

Visit the Risk Practitioners hub

SELF-ASSESSMENT

ISO 42001 Implementation Self-Assessment

Map your existing AI governance against ISO 42001 requirements. Identifies the gaps between your current state and certification readiness across all clause requirements.

Risk teams, compliance, certification leads

AI Usage Policy, SME Template

A one-page AI usage policy template for small and growing businesses. Covers approved tools, data rules, quality checks, and disclosure obligations.

SME owners, operations leads

AI Vendor Due Diligence Framework

Structured questionnaire for assessing third-party AI vendors before procurement. Covers technical documentation, bias testing, data processing, and contractual protections.

Procurement, legal, risk

AI Incident Response Playbook

Step-by-step playbook for responding to AI system failures: detection, escalation, regulatory notification, affected-individual communication, and post-incident review.

Risk, legal, operations

For Procurement

Visit the Procurement hub

EU AI Act Readiness Checklist

A practical 40-point checklist covering scope assessment, classification, conformity assessment, technical documentation, and deployer obligations. Updated for August 2026 enforcement.

Compliance teams, legal, risk

AI Vendor Due Diligence Framework

Structured questionnaire for assessing third-party AI vendors before procurement. Covers technical documentation, bias testing, data processing, and contractual protections.

Procurement, legal, risk

Full library

Every resource, in one place.

EU AI Act Readiness Checklist

A practical 40-point checklist covering scope assessment, classification, conformity assessment, technical documentation, and deployer obligations. Updated for August 2026 enforcement.

Compliance teams, legal, risk

Compliance teams, legal, risk

SELF-ASSESSMENT

ISO 42001 Implementation Self-Assessment

Map your existing AI governance against ISO 42001 requirements. Identifies the gaps between your current state and certification readiness across all clause requirements.

Risk teams, compliance, certification leads

Risk teams, compliance, certification leads

AI Usage Policy, SME Template

A one-page AI usage policy template for small and growing businesses. Covers approved tools, data rules, quality checks, and disclosure obligations.

SME owners, operations leads

SME owners, operations leads

Board AI Governance Question Kit

Twelve questions every board director should be asking about AI, paired with the answers that signal genuine governance and the answers that reveal gaps.

Directors, board secretaries, GCs

Directors, board secretaries, GCs

AI Vendor Due Diligence Framework

Structured questionnaire for assessing third-party AI vendors before procurement. Covers technical documentation, bias testing, data processing, and contractual protections.

Procurement, legal, risk

Procurement, legal, risk

AI Incident Response Playbook

Step-by-step playbook for responding to AI system failures: detection, escalation, regulatory notification, affected-individual communication, and post-incident review.

Risk, legal, operations

Risk, legal, operations