Skip to main content
AI Governance & Enablement

Move fast with AI and stay audit-ready

Clear rules and a trained team are what let you scale AI safely. We set up proportionate governance for the EU AI Act and GDPR, and train your people on the tools and systems they actually use.

Uncertainty slows AI more than regulation does

52.5%

of EU companies that considered AI but held back cited unclear legal consequences.

Source: Eurostat, Use of AI in enterprises, 2025

What goes wrong

  • Staff use AI tools with no policy, so risk is invisible
  • Compliance treated as a final hurdle, delaying launches
  • Generic AI courses that nobody applies
  • No owner, so every team picks its own tools

What we do instead

  • Start with an inventory of where AI is already used
  • Build governance into how projects run from day one
  • Train people on their own tools and workflows
  • Give one owner a simple, workable process

Who it's for

SME leaders

You need to know what the EU AI Act means for you in plain language, without hiring lawyers for every question.

Enterprise innovation teams

You need a process and documentation that help AI projects move through risk, legal and works council review.

Founders

You need an AI Act posture that stands up in investor and customer due diligence.

How it works

Typical timeframe: 2‑6 weeks. Every engagement is scoped to your situation after the discovery call.

Weeks 1‑2

AI inventory and risk check

We list every AI system and tool in use, classify each one under the EU AI Act, and flag gaps against GDPR and transparency duties.

Deliverables
  • AI register
  • Risk classification per system
  • Gap list with priorities
Weeks 2‑4

Policy and process

We write a short, usable AI policy, set up approval steps proportionate to risk, and add the transparency notices your products need.

Deliverables
  • AI usage policy
  • Approval process proportionate to risk
  • Transparency and disclosure templates
Weeks 3‑6

Team enablement

We run hands-on sessions by role, using your own tools and the systems we built, so people leave able to use AI well and safely.

Deliverables
  • Role-based training sessions
  • Prompt and workflow playbooks
  • Training records for your AI literacy measures

You leave with

  • A clear picture of every AI system you run and its risk level
  • A policy people can follow in their day-to-day work
  • A team trained on the tools they actually use
  • Documentation that supports customer and investor due diligence

EU AI Act dates we plan around (as of October 2026)

  • In force now: prohibited practices, AI literacy measures for staff (Article 4), and transparency duties for chatbots and generated content (since 2 August 2026)
  • 2 December 2026: machine-readable marking for generative systems already on the market
  • 2 December 2027: high-risk systems in areas like hiring, credit and education
  • 2 August 2028: AI inside regulated products
Our approach

Governance is built into every Univot engagement, not sold as a separate audit. We are not a law firm, so we work alongside your legal counsel and give them the technical documentation they need.

Common questions

Does the EU AI Act apply to my company?

If you build or use AI systems in the EU, some duties apply. For most businesses that means taking measures to build AI literacy among staff, and transparency when people interact with AI or see AI-generated content. High-risk obligations apply only in specific areas such as hiring, credit scoring, education, and risk assessment and pricing in life and health insurance.

Did the Digital Omnibus delay everything?

No. The Digital Omnibus, in force since July 2026, moved the high-risk deadlines to December 2027 and August 2028 and reworded the AI literacy duty as an obligation to take supporting measures. Prohibited practices, AI literacy and transparency duties still apply.

We are UK-based. Does this matter to us?

If you sell into the EU or your AI affects people in the EU, yes. The UK takes a regulator-led approach, so we help you meet both sets of expectations with one process.

Is this legal advice?

No. We provide the technical and operational side: inventories, documentation, process and training. We work alongside your legal counsel for formal legal opinions.

Turn AI uncertainty into a plan

Book a 30-minute call. We will walk through where you use AI today and what the EU AI Act realistically asks of you.