AI governance, operationalized
Why this got urgent
For a decade AI governance was a policy discussion; the EU AI Act made it a compliance calendar. Prohibited-use bans have applied since 2 February 2025, general-purpose AI obligations since 2 August 2025, and the main high-risk obligations apply from 2 August 2026 (reached) — dates from the European Commission's own AI Act pages. US organizations without EU exposure still feel it through procurement: enterprise buyers increasingly ask vendors governance questions shaped by NIST's framework. The work lands on whoever can produce evidence, which is what the tooling category exists to organize.
Start here
What is AI governance?
The processes and controls that let an organization answer, with evidence: what AI systems do we run, what risks do they carry, who approved them, and how do we know they behave. Two public reference points anchor the field — the EU AI Act (binding law, in force since 1 August 2024, phasing in through 2027–28) and NIST's voluntary AI Risk Management Framework (released January 2023, organized around Govern, Map, Measure, Manage). Everything vendors sell is scaffolding for those answers.
Does my company need AI governance software?
Need starts with an inventory, not a purchase. If you can list your AI systems, owners, and risk classifications in a spreadsheet that stays current, the spreadsheet is governance. Software earns its cost when scale breaks that — dozens of models or use cases, multiple jurisdictions, audit obligations, procurement gates. Buying a platform before the inventory exists produces an expensive empty database, which is the category's most common failure.
Is there an AI governance certification worth getting?
The search interest is real and the market is young. The credential with the most institutional traction is IAPP's AIGP (AI Governance Professional) — IAPP's standing in privacy certification carries over. Treat any certification as vocabulary and signal, not competence: the job is applying frameworks to systems people actually ship, and no exam simulates a product team pushing back on a launch gate.