A policy PDF is not a program. A program is a running cycle — inventory, policy, risk, training, attestation, incidents, board reporting — that keeps working after the kickoff meeting. GOVERNBOX.ai is your AI Governance & Management System of Record: the one place that whole cycle lives.
Plan → Do → Check → Act
ISO/IEC 42001 structures an AI Management System around a continuous improvement loop. Each stage maps to a module you actually run:
Every AI tool gets a UC-### id, a named owner, and a review date — new use cases are screened at intake, so nothing enters the organization ungoverned.
AI use policy, acceptable-use standard, committee charter, and more — generated from a cited control library, approved by a named human, and signed by staff through the attestation portal.
A likelihood × impact risk register and a guided 7-section impact assessment keep the 'what could go wrong' answer current for every system.
A training plan with per-person completion tracking and acceptable-use sign-off — the competency evidence ISO 42001 expects.
A severity-coded incident log linked back to the affected use case — so 'what happens when it fails' has a documented answer before it fails.
A fiscal-quarter-aware board report with a governance maturity score and history, review-date alerts, and a regulatory feed that tells you when the rules change — the management-review loop, automated.
Why a system of record
Programs fail when the evidence is scattered across spreadsheets, inboxes, and someone’s memory. Everything here is connected and audit-logged:
Risks, assessments, training, incidents, projects, and agents all link back to the use case they govern — one click shows a system's entire governance history.
Every create, edit, approval, and export is recorded and never deleted — the 'can auditors verify controls?' answer is built in, not reconstructed.
A shareable governance badge and a live public Trust Page show funders, customers, and members that the program is real — and current.
Aligned to ISO/IEC 42001, NIST AI RMF, every U.S. state AI law and U.S. federal law from the Starter plan — with ISO/IEC 42005, SOC 2, CCPA, Canada and the AI-standards pack on Pro, and the EU AI Act, GDPR, HIPAA, Europe and Global on Agency when your obligations grow.
Transparent pricing
Start with the free Scorecard, then choose the plan that fits. One flat price for your whole organization, never per seat.
Prices below are for the AI Governance module — the first of four GOVERNBOX modules. See modular pricing →
NONPROFIT20 at checkoutBilled in US dollars. £ figures are approximate, at exchange rates from 4 September 2026.
Agency / Enterprise includes one advisory session with the founder. Working sessions, half-day module training and a guided program launch can also be bought on their own, on any plan — see GOVERNBOX.ai Advisory Services →
AI management program questions
Start free with the Readiness Scorecard, then choose the plan that fits.