AI-Gov

AI-Gov

From AI use case to governance requirements.

Introducing AI into a product or process means settling purpose, requirements, controls and evidence. Today that work is mostly coordinated by hand across several functions.

Currently in product validation
Explore our approachGet in touch
ContextUse case & operating environment
RulesApplicable regulation & standards
RequirementsObligations & governance requirements
ControlsTechnical & organisational measures
EvidenceDocumentation & supporting evidence
ReassessmentChanges & renewed review

The problem

Introducing AI raises questions across the organisation.

Introducing AI into a product or process raises questions that cut across Product, Engineering, Legal and Compliance. Today, answering these questions often requires substantial manual interpretation and coordination across different functions.

What is the AI use case?

What is the system intended to do, for whom and in which operating context?

Which requirements apply?

Which laws, regulatory requirements, standards and internal policies need to be considered?

What needs to be evidenced?

Which decisions, controls and supporting evidence need to be documented?

Which controls are needed?

Which technical and organisational measures are appropriate for the specific use case?

What changes over time?

What needs to be reassessed when models, data, functionality or intended use change?

Our approach

From AI use case to traceable governance requirements.

AI-Gov explores how concrete AI use cases can be translated into traceable governance requirements, controls and evidence — in a structured, machine-readable way that can accommodate change and later reassessment. The concept does not provide legal advice or binding regulatory classification.

1. Use case and context

Define the system, its purpose and intended use, and understand context, stakeholders and the operational environment.

2. Identify relevant requirements

Consider applicable laws, regulatory requirements, standards and internal policies.

3. Derive governance requirements

Determine specific requirements and obligations.

4. Define controls and measures

Define technical and organisational measures and controls.

5. Structure evidence

Document the evidence needed for accountability.

6. Enable reassessment

Take changes to the AI system or its context into account in a later reassessment.

Product validation

We are developing AI-Gov together with practitioners.

We are currently speaking with companies that develop or deploy AI-enabled products to understand how AI governance works in practice. Our current validation focus is German companies with 50–249 employees.

We are particularly interested in how organizations:

  • identify and document AI use cases
  • determine applicable regulatory requirements
  • coordinate Product, Engineering and Compliance
  • manage changes to models, data and intended use
  • maintain evidence over the AI system lifecycle

If your organization develops or deploys AI systems,
we would be interested in learning how you approach these questions today.

Current stage

Product concept & validation

AI-Gov is currently being developed and validated. We are testing the approach against real AI use cases and speaking with potential users, design partners and domain experts.

This is not yet a commercial product.
We are exploring the problem, validating the approach and building the right solution together with practitioners.

Product test

Share your experience with AI use cases — and test AI-Gov.

We are looking for practitioners and decision-makers who are directly involved in introducing, reviewing or governing AI use cases within their organisations.

In a confidential conversation, we want to understand how such use cases are handled today: Who is involved? Where do uncertainty, coordination challenges or evidence gaps arise? Which processes and solutions do you currently rely on?

Depending on your professional background and our current research needs, the session will either be a 45-minute context interview or a combined session of around 90 minutes. In the combined session, you can also test an early AI-Gov prototype using a constructed test case with fictional data only.

Please do not share confidential documents, personal data or trade secrets. We do not assess you or your company, and we do not give legal or compliance advice.

Who is this for?

The study is aimed in particular at practitioners and decision-makers in German companies with 50–249 employees, namely B2B software companies, AI integrators and industrial companies. You should have been directly involved, in the past six months, in a concrete AI use case, a related decision, or a review or approval process.

Register non-binding interest

Voluntary participation · no commitment to buy · no legal advice · no sensitive original data · AI-Gov is currently in product validation.

Share practical experience

You report from a concrete AI-related decision, introduction, review or change in your day-to-day work.

A structured conversation

Together we look at the roles, work steps, difficulties and handovers that were actually involved — without assessing your company.

Try a prototype

Selected participants then test an early AI-Gov prototype using a constructed case and fictional data only.

Help shape development

Your experience and observations feed directly into reviewing and further developing our approach.

Let's talk

Would you like to learn more about AI-Gov or our product test?

Write to us. We reply in person and clarify, with no obligation, whether a conversation makes sense.

hello@ai-gov.tech

Imprint

Information pursuant to Section 5 DDG and Section 18(1) MStV

Website operator / Service provider

Michael Kaip
Roedernstraße 23A
12459 Berlin
Germany

Contact

Email: hello@ai-gov.tech
Phone: +49 1575 2008473

Privacy Policy

Last updated: 25 September 2026

1. Controller

The controller responsible for the processing of personal data in connection with this website is:

Michael Kaip
Roedernstraße 23A
12459 Berlin
Germany

Email: hello@ai-gov.tech
Phone: +49 1575 2008473

2. Website hosting and technical delivery

This website is provided as a static website through IONOS Deploy Now by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

According to IONOS, websites of European Deploy Now customers are delivered from a data centre in Germany.

When you access the website, technically necessary connection and access data are processed in order to provide the website securely, reliably and in a stable manner.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our website.

The data-processing agreement published by IONOS does not name Deploy Now. We draw no conclusion about processing on behalf of the controller for the delivery of this website from that agreement.

3. Visitor statistics and access logs

As part of Deploy Now, IONOS generates visitor statistics from server logs. According to IONOS, these statistics may in particular include:

  • the requested website or file,
  • the referrer,
  • browser type and browser version,
  • the operating system used,
  • the device type used, and
  • the time of access.

When the website is accessed, the IP address is also technically transmitted. According to IONOS, it is anonymised immediately after transmission for the purpose of the visitor statistics and subsequently processed without personal reference.

According to IONOS, Deploy Now visitor statistics do not create or read cookies.

Our own website code does not use analytics, advertising or marketing cookies or tracking pixels. In particular, we do not use Google Analytics, Matomo or comparable analytics services.

IONOS also provides server-side access logs for Deploy Now. According to IONOS, these logs are kept available for a maximum of eight weeks.

The legal basis for processing technically necessary access data is Art. 6(1)(f) GDPR. Our legitimate interest is ensuring the security, stability and proper functioning of the website.

4. Contact by email

You can contact us using the email address hello@ai-gov.tech provided on this website.

Merely clicking the email link does not transmit a message to us. Processing by us starts only when you actually send an email.

We process the information you provide, in particular your email address, the content of your message and any additional contact information you choose to provide. The data is used to handle your inquiry and for communication directly resulting from it.

Personal information contained in such messages is currently not systematically transferred into product research, product discovery, CRM, analytics or comparable systems.

Where you yourself are the potential party to a contract and processing is necessary in order to take pre-contractual steps at your request, the legal basis is Art. 6(1)(b) GDPR.

For other general or business inquiries, including communications from representatives or contact persons of a company, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the proper handling of and response to communications addressed to us.

5. Contact by telephone

You may also contact us using the telephone number provided in the imprint.

If you call us, we may process the communication data necessary to handle your inquiry. This may include your telephone number, the time of the call and information you provide during the conversation.

We do not record telephone calls.

Where you yourself are the potential party to a contract and processing is necessary in order to take pre-contractual steps at your request, the legal basis is Art. 6(1)(b) GDPR.

In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is handling and responding to communications addressed to us.

6. Email service

We use IONOS Mail Basic provided by IONOS SE to receive and process email.

IONOS may process information including message content, sender and recipient addresses and technical email metadata.

The published data-processing agreement names IONOS Mail. Where IONOS processes this data on our behalf, it does so on that basis pursuant to Art. 28 GDPR.

The legal bases described in Section 4 apply to our own processing of incoming email.

7. External links to LinkedIn and Blinq

This website contains ordinary external links to LinkedIn profiles and Blinq contact cards.

We do not embed LinkedIn or Blinq plugins, iframes or tracking widgets. Merely loading our website therefore does not establish a connection to LinkedIn or Blinq through these links.

A connection to the respective provider is established only when you actively follow the relevant external link. From that point onwards, further processing is governed by the privacy information of the respective provider.

8. Recipients and international data transfers

Personal data may be disclosed to service providers where this is necessary for the purposes described in this Privacy Policy.

This includes in particular IONOS SE as the provider of our website hosting and email service.

IONOS may use subprocessors in providing its services. The data-processing agreement published by IONOS names IONOS Mail. Under that agreement, the processing it covers generally takes place within the European Union or the European Economic Area. Where the agreement provides for processing in a third country in individual cases, that processing may take place only in accordance with the requirements of Art. 44 et seq. GDPR. The published agreement says nothing about hosting through Deploy Now.

LinkedIn and Blinq do not receive personal data from us merely because our website contains a link to them. A connection to the respective provider is established only when you actively follow such an external link.

9. Storage periods

According to IONOS, Deploy Now access logs are kept available for a maximum of eight weeks.

Email communications are deleted once the relevant inquiry has been handled and no further retention is necessary for the communication.

Data may be retained for a longer period where this is necessary in particular because:

  • an existing or prospective contractual relationship requires it,
  • the data is needed for the establishment, exercise or defence of legal claims, or
  • statutory retention obligations apply.

Where contact information or notes relating to a telephone inquiry are stored, the same principles apply. Such information is deleted once it is no longer necessary for handling the inquiry and there is no legal reason requiring further retention.

10. Provision of personal data

Contacting us by email or telephone is voluntary. There is generally no statutory obligation to provide personal data in order to contact us.

If you do not provide the information necessary to handle your inquiry, we may be unable to answer it, or may be unable to answer it fully.

Technically necessary connection data is generated automatically when the website is accessed. Without processing this data, the website cannot technically be transmitted and displayed.

11. Your rights

Subject to the applicable legal requirements, you have in particular the following rights:

  • the right of access to your personal data under Art. 15 GDPR,
  • the right to rectification of inaccurate data under Art. 16 GDPR,
  • the right to erasure under Art. 17 GDPR,
  • the right to restriction of processing under Art. 18 GDPR,
  • the right to data portability under Art. 20 GDPR where its requirements are met, and
  • the right to object to processing based on Art. 6(1)(f) GDPR under Art. 21 GDPR.

To exercise your rights, you can contact us at hello@ai-gov.tech.

Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data based on Art. 6(1)(f) GDPR.

We will then no longer process the personal data concerned unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.

The supervisory authority responsible for the controller is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

Email: mailbox@datenschutz-berlin.de

13. Security

This website is delivered using an encrypted HTTPS/TLS connection.

Please note that complete security of data transmission over the internet and communication by email cannot be technically guaranteed.

14. Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with this website.

15. Changes to this Privacy Policy

We may update this Privacy Policy where changes to the website, the service providers, the processing activities or legal requirements make this necessary.

The version published on this website at the relevant time applies.