Resources

AI governance, shown not told

Five complete, free worked examples of the documents every EU company deploying AI needs.

Here are five finished governance documents you can read end to end: an AI system inventory, a risk assessment, an AI policy, a model card, and an incident response plan. Together they are the core of what an EU deployer is expected to have in place.

I built them for a fictional Baltic insurer, Vesta Mutual, so everything can be shown in full, including the awkward parts: the shadow AI the survey missed, the amber calibration finding, the works-council briefing. Real client documents are confidential, which is exactly why a rigorous public worked example is rare and useful. Each one is free to read and download, licensed CC BY 4.0: reuse it with attribution.

From examples to evidence

Individuals prove competence with a portfolio. Companies prove it with records.

A company shows competence through documented, role-based AI literacy: who was trained, on what, and when. Enforcement of the EU AI Act's literacy duty (Article 4) starts 2 August 2026. The workshop produces that evidence.

See the literacy & governance workshop
  • Read the standard. The five worked examples show the level the workshop works to.
  • Build the record. Role-based training that produces an evidence pack.
  • Adapt the artifacts. The governance starter turns these examples into your own documents.