Home / Sectors
We work with large, complex organisations where AI governance is not optional. The control system core is fixed. A sector overlay adds the regulator-specific obligations, elevated risk classifications and evidence expectations on top. Nothing is rebuilt per sector.
01 / Sector overlays
Each overlay is used alongside, not instead of, the core toolkit. It identifies the regulatory obligations specific to the sector, explains how they interact with the six engines, and specifies the additional governance actions required.
For UK and EU-facing banks, insurers, asset managers, payments and consumer-credit providers. The regulators have been explicit: AI is governed through existing frameworks, not a new AI statute. The burden of proof sits with the firm. A named senior manager is accountable for AI outcomes.
AI GOVERNANCE LEAD · CRO · MODEL RISK · COMPLIANCE · SMF HOLDERS
For NHS trusts, integrated care systems, and private healthcare and digital-health providers. Among the most heavily regulated AI environments in the UK: five regulators hold distinct jurisdiction over clinical and operational AI, from device classification to data protection and deployment standards.
AI GOVERNANCE LEAD · CLINICAL SAFETY OFFICER · CALDICOTT GUARDIAN · MEDICAL DIRECTOR · IG
For central government departments, arm's-length bodies and local authorities. The public sector carries an obligation the private sector does not: proactive transparency to citizens. Algorithmic decisions are subject to mandatory recording, equality duties, and heightened scrutiny of automated decision-making.
AI GOVERNANCE LEAD · SRO · DPO · DIGITAL / TECHNOLOGY DIRECTOR
For organisations holding licences from Ofgem, Ofwat or Ofcom, and those serving them: gas networks, electricity distribution and transmission, water and wastewater, telecoms. Sector obligations sit on top of the baseline UK AI Framework, EU AI Act and NIST AI RMF alignment built into the core toolkit.
AI GOVERNANCE LEAD · LEGAL / REGULATORY AFFAIRS · IT SECURITY · EXECUTIVE COMMITTEE
02 / How overlays work
The overlay applies elevated risk classifications, incorporates additional AI Impact Assessment questions, maintains the evidence the regulators expect, and maps each obligation to the engines that demonstrate control.
Every regulator asks the same question: can you evidence control at the point of use?
03 / How to begin
The AI Control Diagnostic includes a risk posture assessment aligned to your regulatory context and sector requirements. The deployment plan it produces is configured to your environment, not a generic template.
What every overlay adds
Elevated risk classifications for the use cases your regulator watches.
Additional AI Impact Assessment questions specific to the sector.
The evidence pack your regulator expects to see maintained.
Engine mapping: which part of the system demonstrates each obligation.