Skip to content

An AI governance plan, written with your people and adopted by your executive

We draft your AI policy, a register of the AI you use, and the approvals around it, mapped to the Australian Government's Guidance for AI Adoption and ISO/IEC 42001. Your executive reviews it, decides, and signs it. Two to six weeks.

Request a Callback

Fixed price, from $7,500 + GST. The discovery call is free and takes 30 minutes.

Why now

Your people are using AI. Nobody has written the rule.

Three things usually bring an organisation to this point:

AI is already in use

People use ChatGPT, Copilot, Claude and the AI built into the software you already pay for, often on personal accounts. Nobody has a list of it.

The board is asking

Directors want to know the organisation's position on AI, who owns it, and how a new tool gets approved. A policy nobody signed does not answer that.

The privacy rules change on 10 December 2026

From that date, privacy policies must explain when computer programs make, or substantially help make, decisions that significantly affect people. Answering that starts with knowing which of your tools do.

Fixed prices

Three fixed-price plans

Each one is fixed in scope and price before it starts, with half paid on booking and half on acceptance.

AI Policy Sprint

2 weeks

$7,500 + GST

For organisations of up to about 150 staff that use bought AI tools and are not regulated by APRA or ASIC.

  • An AI policy: one page for staff and a short version for management
  • An acceptable use guideline with a one-page data-handling rule
  • The approved tools, with the plan and settings for each
  • A register of up to 15 AI tools and uses, with a named owner
  • A one-page incident process
  • A map against the six practices in the Guidance for AI Adoption

AI Governance Plan

4 weeks

$19,500 + GST

For organisations of 150 to 1,000 staff, or up to three business units, where some AI touches decisions about customers or staff.

  • Everything in the AI Policy Sprint, with a register of up to 30 entries
  • Risk and impact assessments of your top five AI uses
  • A privacy screen of your tools for the automated decision rules that start on 10 December 2026, flagged for your lawyers
  • Roles and accountabilities, and an approval workflow for new tools
  • A 12-month training plan by role
  • An ISO/IEC 42001 gap summary and a two-page board paper

Regulated AI Governance Plan

6 weeks

$42,000 + GST

For APRA-regulated entities, financial services and credit licensees, health, government agencies and their suppliers, and firms that build AI into what they sell.

  • Everything in the AI Governance Plan, with assessments of your top ten uses
  • A map of the sector obligations to check, such as APRA CPS 230 and ASIC's expectations
  • A clause-level ISO/IEC 42001 gap report
  • An AI supplier checklist for procurement and legal review
  • A briefing for your board or risk committee
  • A 90-day implementation roadmap

Every plan includes a decision log, an adoption record for your executive to sign, and a list of points for your lawyers to review. Larger organisations, or more than five business units, are priced on scope.

You adopt it, so it is yours

A plan your executive signs, not a binder we hand over

Your people make the decisions. We draft, record and map them.

Your decisions, recorded

Risk appetite, approved tools, risk ratings and owners are decided by your people in the workshops, and each decision goes in a log. We propose the options; you choose.

Adopted by your executive

Acceptance means the deliverables match the statement of work. Adoption is separate: your accountable executive or board signs an adoption record, which makes the plan your document.

Ready for your lawyers

We describe the obligations to check and list them for legal review before adoption. Nothing in the plan is legal advice, a certification or an audit opinion.

How It Works

From kick-off to a signed plan

01

Kick-off with your executive

We agree the scope, the sponsor and the dates, and collect the tools and policies you already have.

02

Interviews and workshops

We talk to the people who use and buy AI, then run the workshops where your team makes the decisions.

03

Draft, review, adopt

You review the draft, your lawyers check the listed points, and your executive signs the adoption record.

Is this right for you?

Perfect For

  • Organisations of 50 to 1,000 staff using ChatGPT, Copilot, Claude or the AI inside their software
  • Executives and boards asked for the organisation's position on AI
  • APRA or ASIC regulated firms, health providers and government suppliers (the Regulated plan)

Not The Right Fit

  • Anyone who wants a template to download and adapt alone
  • Organisations that need the ISO/IEC 42001 certificate itself, which only an accredited body can issue
  • A legal opinion on what the Privacy Act requires of you, which is your lawyers' call

FAQ

Frequently asked questions

No document makes an organisation compliant on its own. The plan sets out how you will govern AI, mapped to the Australian Government's Guidance for AI Adoption and to ISO/IEC 42001, and lists the legal points for your own lawyers to check. Compliance comes from running it.

No. Only an accredited certification body can certify an organisation against ISO/IEC 42001, and it keeps that work separate from whoever helped you prepare. We prepare you: the AI Governance Plan includes a gap summary against the standard, and the Regulated plan a clause-level gap report.

No. We describe the obligations worth checking and give you a list of points for your lawyers to review before you adopt the plan. What the law requires of your organisation is for them to say.

A template is a starting document. This plan is written from interviews with your people, covers the tools you actually use, and records the decisions your executive makes along the way. Your executive signs an adoption record at the end, so the plan is your document, not ours.

From that date, privacy policies must explain when computer programs use personal information to make, or substantially help make, decisions that could significantly affect people. The AI Governance Plan screens your tools for this and flags each one for your lawyers to review. We do not decide whether the rule applies; they do.

A named executive sponsor and a day-to-day contact, the list of tools you know about, time with the people we interview, and your existing privacy, security and risk policies. Review comments within five business days keep the plan on its dates.

Most of the work is then yours to run. We can help with a board briefing, training your staff on the new policy, a quarterly review of the register, or preparation for ISO/IEC 42001 certification, but none of it is required.

Ready to Talk?

Three ways to start a conversation

Pick whichever suits you. Every path goes to the same small team.

We respect your privacy. Your details are used only to call you back about your enquiry.

Prefer to chat now?

Our AI assistant qualifies and books in under 90 seconds.

Call us directly

Mon to Fri, 9am to 5pm AEDT.

+61 2 5300 5007

No obligation. We won't add you to a marketing list.

A governance plan your executive can sign

Book a free 30-minute call. We'll work out which plan fits, who should sponsor it and what you already have, then send a fixed-price proposal within 48 hours.

On time, or we keep working free. If we miss the delivery date for a reason within our control, we credit 10% of the fee, and we rework any deliverable that does not match the statement of work until it does. If the kick-off is not useful to you, stop there and pay only for the kick-off.