Every team is already doing some form of AI governance. The next 6 steps document what yours looks like today, flag the gaps, and give you a defensible artifact you can share with your board, auditor, or cyber insurer. Skip anything that doesn't fit yet, you can fill it in later from the dashboard.
Confirm your company profile.
You already have a company name, industry, and headcount. Confirm the basics; edit anything that's off. Every field has a "?" if you're unsure what to pick.
The legal or trading name your team recognizes on invoices and reports.
Pick the closest fit. Your industry shapes the risk profile we assemble for your Charter.
We send deadline and expiration reminders during your business hours, 8:00am to 4:00pm on weekdays. Nothing arrives at 3:00am, on a weekend, or on a holiday. Calendar reminders arrive exactly when you set them.
Learn more
Deadline reminders and document-expiration notices follow this setting. If one would land outside business hours, we send it earlier, never later, so you still get it in time.
Calendar reminders are the exception. They arrive at the offset you chose, even if that falls outside business hours. A reminder set for an hour before a 8:00am meeting is only useful at 7:00am, so that is when it goes. Your time zone still decides what "8:00am" means.
Your account admin can change this any time on the Account page.
Check every workflow where your team already uses AI. Not sure? Pick what's true today; you can add more later.
Learn more
These use cases feed the AI Use Case Inventory module (next step). Governance frameworks like NIST AI RMF MAP-1.1 require you to enumerate where AI is deployed before you can risk-rank it.
Common blind spots: meeting-note transcription tools, autocomplete in email/CRM, and analytics dashboards with an "AI insights" tab. Anything that generates or classifies text, images, or decisions on your behalf counts.