AI GOVERNANCE

Give AI use a clear owner
and a documented decision.

Bring your AI systems, use cases and risk assessments into a shared workspace. Defensiq helps teams record how AI is used, who is accountable and what needs to happen before an internal approval.

Start with an inventory and structured assessment. With AI Governance Advanced, connect controls, policies and evidence to review decisions and follow-up work.

Free forever · Basic plan limits apply

Search systems, controls, policies…AI GovernanceAE

AI Governance Dashboard

Overview of your AI governance posture

Export report
Total AI Systems
12+2 in the last 30 days
High Risk Systems
3Prioritised for review
Missing Reviews
2Follow-up required
Governance Score
78Sample score / 100

AI Governance Posture Trend

0255075100AprMayJunJulAugSep

Risk Distribution by Autonomy Level

Human in loop
8
Human on loop
3
Autonomous
1

Upcoming reviews

Support Drafting Assistant
Medium08 Oct
Document Search
Low12 Oct
Example organisationSample workspace · October 2026
Recreated from Defensiq · Illustrative sample data

START WITH THE SYSTEM AND ITS USE

Know what you are governing

Create a record for each AI system and describe its purpose, owner, supplier, deployment context and use of data. Record its lifecycle stage and next review date.

Maintain use cases alongside systems. A customer-support drafting assistant and a tool that makes operational decisions may need different oversight, even when they use the same underlying technology.

The result is an inventory your team can maintain and review together.

A STRUCTURED ASSESSMENT

Make risk discussions specific

Work through questions about data sensitivity, autonomy, human oversight, security exposure, reliability and supplier dependency. Save the assessment results and the methodology used to produce them.

Review the recorded inherent and residual risk, control coverage, assurance confidence and findings. These results structure the discussion; the responsible people still make the governance decision.

Data sensitivityAutonomyHuman oversightSecurity exposureReliabilitySupplier dependency

AI GOVERNANCE ADVANCED

Make the review actionable.
Keep people accountable.

The full decision, control and evidence workflow requires the AI Governance add-on on an eligible Business or Enterprise GRC plan.

01

Connect the decision to controls and evidence

With Advanced, assign controls to AI systems, record their implementation and verification, and connect supporting policies and evidence. Link relevant risks to your wider programme where shared GRC access is enabled.

For a support assistant, that might mean a human-review requirement, an AI-use policy, a documented review and a risk record covering sensitive customer information.

02

Record approval—and what still needs to happen

Advanced supports human assessment decisions, including approval with conditions, remediation required and a decision not to approve. Keep the decision with its rationale and the assessment it concerns.

Give conditions an owner and due date. Create follow-up tasks from findings and revisit the assessment when the system or use case changes. Your team can see the earlier record and the later review.

03

Keep oversight visible as AI use changes

Record autonomy levels, permitted actions, human-approval requirements and review dates. Use lifecycle and policy settings to support your internal review process.

These records document how oversight should work. They do not, by themselves, control the behaviour of an external AI service.

ADVANCED · A WORKED EXAMPLE

An Advanced workflow: review a customer-support assistant

Illustrative workflow · Support Drafting Assistant

Advanced access, relevant shared modules and authorised reviewer permissions are required.

  1. 01
    Register the system. Add “Support Drafting Assistant,” assign its business owner and record the supplier, data context and intended use.
  2. 02
    Describe the use case. Record that the assistant drafts replies and that a person reviews them before sending.
  3. 03
    Assess the risks. Complete the questions and review the saved results and findings. Identify where supporting controls or evidence are missing.
  4. 04
    Prepare for review. Assign the relevant controls and connect the policy and evidence records. Resolve blocking findings and meet the submission requirements.
  5. 05
    Record the human decision. An authorised reviewer approves, approves with conditions, requests remediation or declines approval. Any conditions have a named owner and deadline.
  6. 06
    Follow through. Create tasks for outstanding findings, schedule the next review and use the report views to keep management informed. Download the assessment result as JSON when you need the underlying saved record.

The result is a system record connected to its assessment, findings, supporting records and human decision.

MANAGEMENT VISIBILITY

See the programme that needs your attention

Use report views to review your AI inventory, assessment decisions, suppliers and systems needing attention. Advanced adds board-summary and maturity views based on the information recorded in the workspace.

Keep the detail close to the summary so a reviewer can open the system or assessment behind a result.

CHOOSE THE DEPTH YOU NEED

Start with basics, add the governance workflow you need

Sign up for the free-forever basic plan. Add Advanced when you need the full governance and review workflow.

FREE FOREVER

AI Governance Free

AI Governance Free is a free-forever plan with limited system inventory, basic assessments, starter policy drafting and basic report views. Sign-up is open. No paid GRC subscription is needed for the Free plan; its usage limits apply.

Limited inventory · Basic assessments
Starter policy drafting · Basic report views
BUSINESS / ENTERPRISE + ADD-ON

AI Governance Advanced

AI Governance Advanced is an add-on for eligible Business or Enterprise GRC subscriptions. It adds the full assessment decision workflow, assigned and verified controls, policy and evidence lifecycle, shared-risk links, AI supplier assessments and advanced reporting.

Human decisions · Controls & evidence
Shared risks · Supplier assessments · Reporting

Related GRC modules and shared records have their own access requirements. Confirm the base plan, add-ons, roles and limits for your team during a demo.

AI Governance and Nova serve different purposes

AI Governance helps your organisation govern its use of AI. Nova is an assistant within Defensiq that can help with project questions, drafts and supported actions that you review.

They have separate access requirements. AI Governance access does not automatically include Nova.

Explore Nova in the platform

CLARITY STARTS HERE

Questions about AI Governance

Details to help you decide where Defensiq fits.

Yes. Sign up for AI Governance Free and use the basic workspace on a free-forever plan, within its usage limits. It does not require a paid GRC subscription. Advanced combines with an eligible GRC subscription and add-on.

No. AI Governance Free is a free-forever plan with its own feature and usage limits. The separate GRC platform offers a 14-day trial.

The established inventory workflow is maintained by your team. Record the systems and use cases you identify; automatic discovery across external systems is not part of this described workflow.

No. The assessment helps structure risk and governance review. Its risk levels and recommendations are not a legal determination, conformity assessment or proof of compliance.

Yes, in Advanced and with the appropriate permission. Conditions need a responsible owner and due date, and the assessment must meet the submission requirements before the reviewer records a decision.

Advanced can link or promote AI risks to shared GRC records where your account has access. Policies, evidence, vendors and controls can also provide shared context through the relevant enabled workflows.

No. Oversight settings and lifecycle decisions govern the record in Defensiq. Enforcement inside an external AI service requires controls in that service and your operating process.

The assessment results screen can download the saved assessment and calculation snapshot as JSON. Other report and export capabilities depend on the tier and enabled workflow; confirm the output you need during a demo.

YOUR NEXT STEP

Put a real AI use case through the workflow

Sign up for AI Governance’s free-forever plan and start with one system, its owner and a basic assessment. You can request a demo to explore the Advanced workflow.