Open Data & AI Governance Kit¶
Board-ready data & AI governance templates — the scaffolding every organisation needs, given away free. Take the role-based assessment to find your gaps, then use the 25 templates that close them. Frameworks, policies, operating model, registers, board packs, and EU AI Act readiness updated for the 2026 Digital Omnibus dates.
Take the assessment Classify a system Open the workspace
26 templates · 25 of 26 fully drafted · 40 assessment questions across 8 roles · 4 worked examples
Free and open — forever
No accounts, no paywall, no email capture. Everything here is licensed CC BY 4.0: use it, adapt it, ship it inside your own organisation. Attribution appreciated, never required for internal use.
Find your gaps in ten minutes¶
The readiness assessment asks only the questions relevant to your role — Legal, Governance, ML, Product, HR, Security, Audit, or the Board — scores them by severity, and produces a report you can present.
-
Answer as your role
Pick one or more roles and answer only what applies to you, with plain-English help on what each question really requires.
-
Get a scored report
Overall readiness, a score per category, and your top gaps ranked by severity — each linked to the template that closes it.
-
Tailor it to the audience
Reframe the same answers for a Board, a regulator, your exec team, or the working team. Export to PDF, Markdown, or standalone HTML.
-
Nothing leaves your browser
No accounts, no uploads, no analytics. Answers are stored only on your device, and one button erases them.
What's inside¶
The kit covers data and AI governance end to end — 25 templates across six areas.
-
Frameworks
The operating backbone: a Data Governance Framework, an AI Governance Framework, a governance Charter, and a Maturity Assessment to baseline where you are.
-
Policies & Standards
Data governance, data quality, classification & handling, acceptable AI use, an AI development & deployment standard, and third-party AI risk.
-
Operating Model
RACI matrix, governance committee terms of reference, roles & responsibilities, and a decision-rights / escalation model.
-
Registers
Data asset register, AI system inventory, risk register, issue & incident log, and a processing / DPIA log.
-
Risk & Control
AI risk assessment, model cards / model risk documentation, and a control library with an assurance map.
-
Board & Reporting
A board pack template and a KPI / KRI dashboard so governance is visible to leadership, not buried in a wiki.
Then turn it into a plan¶
-
Sequenced plans per starting path, with rough effort estimates — including a variant for small or flat organisations with no committee.
-
The same templates mapped to ISO/IEC 42001, NIST AI RMF, Singapore's Model AI Governance Framework, and the EU AI Act.
-
Guided paths through the hard judgements — is this system high-risk? — that end in a verdict with its reasoning recorded and dated, not in more reading.
-
Nine registers editable in the browser — dropdowns, live scoring, autosave, and export to real Excel. Nothing is uploaded.
-
Ten common requests, in the words they usually arrive in, mapped to where to start and roughly how long it takes.
-
Four templates filled in for a fictional mid-size company — deliberately imperfect, so you can see what "good enough" actually looks like.
Start with the EU AI Act¶
If you only do one thing today, find out where you stand. The 25-point readiness checklist is reflected against the current timeline, including the 2026 Digital Omnibus changes that deferred high-risk obligations.
Not legal advice
These templates are a head start, not a substitute for professional judgement. Adapt them to your jurisdiction, sector, and risk appetite, and have qualified counsel review anything material before you rely on it.