AI governance for UK SMEs

Practical AI governance for smaller organisations

AI adoption is moving faster than visibility and control. Management may not know which AI tools or embedded features are in use. Baseline Governance helps smaller organisations understand current AI use, identify material risks and establish proportionate governance.

Do you know how AI is actually being used in your business?

  • Staff may be using ChatGPT, Copilot, Gemini, Claude and AI features inside existing software.
  • Sensitive, client or personal information may be entering AI tools.
  • AI may be influencing decisions, external outputs or customer work.
  • Ownership, policies and approved-tool rules may be unclear.
Start here

AI Control Snapshot

Answer 8 questions in around 3 minutes and get an immediate indication of whether your current AI controls are Controlled, Developing or Exposed, together with the areas worth looking at first.

No contact details are required to receive your result. Results are immediate.

This result is a practical control-gap indicator, not a certification, legal assessment, technical security assessment or regulatory approval.

AI Governance Baseline

£495

A fixed-scope review for smaller organisations that want a practical starting point without buying an enterprise governance programme.

Includes a 30-minute management discussion and a short information-gathering questionnaire. Delivery is normally within 5 working days once required information is received, followed by a 30-minute management handover.

  • AI use and tool register
  • Review of up to 5 current AI use cases
  • Practical risk categorisation
  • Short AI acceptable-use policy
  • One-page staff guidance
  • Action and risk register
  • Concise management summary and handover

The service excludes legal advice, certification, regulatory approval, technical security testing, ISO 42001 readiness, unlimited consulting and full implementation of controls. It does not guarantee compliance.

How it works

01

Understand current AI use

02

Identify material gaps and risks

03

Identify and prioritise proportionate controls

Practical, evidence-based governance

The approach is informed by current UK AI and data-protection guidance, ICO expectations, NIST AI risk-management principles and ISO/IEC 42001 concepts where proportionate. The focus is on practical controls for smaller organisations rather than unnecessary complexity.

We normally assess processes and use cases rather than asking for sensitive client, customer or employee data.

About Baseline Governance

Baseline Governance provides practical AI governance support for smaller organisations, helping management understand how AI is being used, where material risks exist and which controls are proportionate.

Our work is led by professionals with senior experience delivering complex technology, data and AI programmes, including within large and regulated organisations. We focus on practical, proportionate governance that smaller organisations can put into use quickly.

Baseline Governance is a trading name of Berrymoon Ltd, registered in England and Wales.

Company number: 07984930. Registered office: 4th Floor, 4 Tabernacle Street, London, United Kingdom, EC2A 4LU.