Technology policies
Policy structures covering software, SaaS, AI and data, written to be followed rather than filed.
Cross-cutting
Govern technology with clarity, accountability and evidence
Governance sits underneath both value systems. We design it proportionate to your size, maturity, risk and operating environment — so leadership can decide with confidence without turning governance into bureaucracy.
What we design
Six components. Most organisations need three of them urgently and can sequence the rest.
Roles and decision rights
Clear ownership, approval paths and escalation for technology investment and change.
Risk classification
A consistent way to tier use cases and set control intensity to match actual consequence.
Privacy and data handling
Practical treatment of privacy, retention, access and data movement inside the operating model.
Evidence and traceability
Records, decision rationale and control evidence that stand up to internal review and regulator questions.
Executive governance
Oversight routines, reporting views and decision packs that make accountability sustainable.
Control domains
Where the controls apply
- Software and SaaS governanceProcurement approval, ownership, utilisation review and renewal control.
- AI governanceUse-case approval, risk tiering, data permissions and human review thresholds.
- Third-party oversightSubprocessor visibility, contractual controls and periodic reassessment.
- Monitoring and reportingConsumption, exposure and exception reporting on a fixed cadence.
Our position
Governance should enable confident growth. Done well it makes value easier to understand, risk easier to surface and accountability easier to sustain.
Done badly it becomes a committee that slows delivery without reducing exposure. The difference is proportionality — matching control intensity to consequence.
Policies
Decision rights
Risk tiers
Approval flows
Monitoring
Executive reporting
How this connects to the value systems
Governance is not a separate engagement in most cases. It is the layer that stops the savings from Software Licence Value eroding, and the layer that lets AI Usage Value scale without accumulating unmanaged risk.
Our principles for how we apply it in delivery are set out under Responsible Technology.