Regulatory fines
EU AI Act, SAMA, SEC, FCA, all now have teeth. Non-compliance is no longer a risk; it's a certainty.
← AI CoE · Programmes & Initiatives
Build boldly.
Build boldly.
Govern wisely.
You're busy building AI engines and performance systems, from generative AI to your most foundational, high-impact models. Governance is what keeps you on top of the business, covering the needs of every stakeholder, from the boardroom to the regulator. Excelledia delivers AI governance that ties our fees to your results.
The imperative
Every organisation deploying AI is already exposed.
The question is no longer whether you need AI governance, it's how long you can afford to wait.
Reputational collapse
One AI failure, a biased decision, a breach, an unexplainable outcome, can destroy years of brand equity overnight.
Board & investor liability
Directors are personally accountable for AI risk oversight. Ignorance is not a defence.
Operational loss
Ungoverned AI is unreliable AI. Competitors who govern well will move faster and safer than you.
Product 02 · The EAGF Diagnostic
Know exactly where you stand.
The AI Governance Assessment is a board-ready diagnostic scored against the Excelledia AI Governance Framework (EAGF), five pillars, benchmarked to your regulatory obligations, delivered in 4–6 weeks. Here's what your board sees.
Overall EAGF Maturity
of 5.00.0Defined
Level 3 of 5, Defined
+0.6 since last quarter
Five-Pillar Maturity
EAGF
Current
Target
Board Readiness
SummaryExaminer-ready in 30 days
47AI systems inventoried & classified
3high-risk systems flagged & remediating
9frameworks mapped, clause by clause
Pillar Maturity & Targets
Current vs TargetVertical marker shows the Q4 target for each pillar.
Regulatory Readiness
MappedNIST AI RMF81%
ISO 4200172%
FCA AI Governance69%
EU AI Act64%
SAMA CSF58%
AI System Inventory · Risk Classification
EU AI Act tiers47Systems
High-risk3
Limited-risk12
Minimal-risk32
Unacceptable0
Next Best Actions
RoadmapClose Governance gapBoard reporting cadence & policy framework
Lift People maturityRole-based AI literacy across functions
Validate 3 high-risk systemsExaminer-ready evidence pack
Generated by isorobot · the AI governance platform, board report in 30 seconds
Board-ready · Examiner-ready
5EAGF pillars scored
4–6weeks to delivery
100%board-ready report
8+frameworks benchmarked
The EAGF framework
Five pillars. One complete governance system.
The Excelledia AI Governance Framework, battle-tested across 150+ enterprises. Every product, engagement and regulatory obligation maps back to these five pillars.
Strategy
AI vision, risk appetite, board mandate and strategic alignment with business objectives.
- AI vision & mandate
- Board accountability
- Risk appetite
- Strategic alignment
People
Workforce AI literacy, role-based training, responsible culture and human oversight.
- AI literacy programmes
- Role-based training
- Human oversight
- Culture & ethics
Process
AI lifecycle management, model risk assessment, incident response and vendor oversight.
- AI lifecycle mgmt
- Model risk assessment
- Incident response
- Vendor oversight
Technology
isorobot platform, data governance, explainability tools and security controls.
- isorobot platform
- Data governance
- Explainability
- Security controls
Governance
Policies, regulatory compliance mapping, audit, board reporting and certification.
- Policy framework
- Regulatory mapping
- Audit & reporting
- Board reporting
Standards & regulations
Nine frameworks. All mapped to EAGF.
All supported natively by isorobot, across the US, Saudi Arabia, the UK, Europe and the UAE & GCC.
ISO 42001
The global AI management system standard, the foundation of every Excelledia engagement and isorobot's core architecture.
NIST AI RMF
The US federal AI risk management framework, govern, map, measure, manage. Mapped to EAGF natively.
EU AI Act
The world's most comprehensive AI law, risk tiers with high-risk obligations for finance, healthcare and government.
FFIEC AI Guidance
Federal banking regulators' AI guidance, credit, fraud and model risk. Examiner scrutiny beginning now.
SAMA CSF
Saudi Central Bank Cyber Security Framework, AI in financial services must comply, with PDPL adding a data layer.
SDAIA / PDPL
Saudi AI governance mandates and the Personal Data Protection Law, public and private sector obligations.
FCA AI Governance
The FCA's AI governance expectations for regulated firms, explainability, accountability and fairness.
DORA / NIS2
Digital operational resilience and network security directives, AI operational risk in finance and infrastructure.
HIPAA / FDA AI
Health data and clinical AI device obligations, HIPAA privacy, FDA guidance and OCR enforcement.
The client journey
Five products. One complete journey.
From first conversation to self-sustaining AI governance, every stage designed, every transition managed.
AI Executive Academy
A 2-day immersive programme for boards and C-suite, leave with a live EAGF score and a 90-day plan.
AI Governance Assessment
The board-ready EAGF diagnostic, exactly where governance stands, and exactly what to do next.
isorobot Platform
The GRC platform built natively for AI governance, inventory, maturity, compliance and board reports. Explore the platform →
AI Governance Programme
End-to-end EAGF implementation across all five pillars, from gap to embedded governance.
AI Centre of Excellence
Governance institutionalised permanently inside your organisation, self-sustaining, owned by you.
Every stage available under the Results Contract, 50% at milestones · 50% at outcomes · if you don't succeed, we don't get paid.
For the board & C-suite
Boards that govern well move faster.
AI risk oversight is now a fiduciary duty. Every seat at the table carries direct, personal accountability.
CEO
CEO / Managing Director
Accountable to the board and shareholders for AI risk, needs a defensible governance posture before any incident, not after.
CRO
Chief Risk Officer
FFIEC, SAMA and FCA now require AI risk frameworks. The CRO is personally accountable for them.
GC
General Counsel
EU AI Act, SEC Item 106 and the UK AI White Paper make legal exposure direct and personal.
CDO
Chief Data / AI Officer
Responsible for AI deployments that are compliant, explainable and auditable across the enterprise.
AC
Board & Audit Committee
Fiduciary duty requires AI risk oversight. Examiners and investors are already asking the question.
HC
Holding Company CEO
Governance must cascade to portfolio companies, one breach anywhere is a group-level event.
The commercial model
We're only paid when you achieve the outcomes we agreed.
Milestone payments, delivery
Phase 1 · Discovery & BaselineEAGF assessment · current state · gap analysis · regulatory mapping
Phase 2 · Design & BuildFramework design · isorobot configuration · policy drafting · training
Outcome payments, results
Phase 3 · Deploy & ValidateRollout · leadership training · regulatory validation · documentation
Phase 4 · Outcomes AchievedEAGF maturity target hit · board approval · examiner readiness · certification
"We only win when you do."
The urgency
The enforcement clock isn't ticking. It's running.
NowSDAIA AI governance mandates active in KSAActive
Q2 2026SEC AI disclosure under active examiner reviewActive
Aug 2026EU AI Act, GPAI obligations fully enforcedUpcoming
2026FFIEC AI guidance examinations begin at scaleActive
Jan 2027EU AI Act, high-risk AI system compliance deadlineDeadline
2027+DORA AI operational resilience audits pan-EuropeanDeadline
Every week without governance is another week of unquantified exposure. The cost of inaction now exceeds the cost of governance.
Your next step
Stay on top of the business. Govern your AI.
Thirty minutes with a senior Excelledia partner. We'll map your regulatory exposure, identify the highest-urgency gaps, and outline the fastest path to board-ready governance. No obligation. Just clarity.
If you don't achieve the outcomes we agreed, we don't get paid.