Meet us Meet us
Book a consultation Own your AI
SolutionsServicesAI Readiness AssessmentAI GovernanceBLDR DeploymentOwn your AIFree toolsAI Readiness CheckAI Governance CheckShadow AI Risk CalculatorAI Health and Sovereignty Check
ProductsPlatformBLDRBLDR DeploymentBLDR at workAI productsGusIkraaSanad
RegionsWhere we workAPACGulfRules we build forPrivacy Act ADM rulesGuidance for AI AdoptionPDPL and NCA
InsightsStart where you areNew to thisFeeling the painExploring optionsComparing vendorsPopular answersIs ChatGPT safe for company data?What is sovereign AI?Why enterprise AI pilots failAll insights
CompanyInovaAboutLeadershipOur workNewsroomWork with usPartnersCareersTrust and legalBook a consultationContact
Free toolsBook a consultation Explore BLDR
Home / Free tools / AI Governance Check
Free tool · AI Governance Check

Is your AI governance ready for the rules?

Check your controls against the practices regulators and boards now expect: Australia's Guidance for AI Adoption and Privacy Act changes in APAC, PDPL and NCA expectations in the Gulf. Pick your region.

01Is one person accountable for AI use across the organisation?

Guidance for AI Adoption: decide who is accountable.

02Do you keep a register of AI systems and what they're used for?

Including tools staff use day to day.

03Do you assess the impact of each AI use case before it goes live?

Who could be affected and how.

04Does your privacy policy explain automated decisions that use personal information? APAC

Privacy Act APP 1.7 to 1.9, in force from 10 December 2026.

05Do you tell people when they're dealing with AI, or when AI shaped a decision about them?

Share essential information.

06Are AI systems tested before release and monitored after?

Accuracy, bias, failure modes and drift.

07Can a person review, override or stop any AI action that matters?

Maintain human control.

08Are agent actions and approvals logged so you can show who did what?

An audit trail you could hand to a regulator.

09Do you follow the regulator's advice not to put personal information into public AI tools? APAC

OAIC guidance on commercially available AI products.

10Is personal data processed by AI kept within the Kingdom or approved locations? Gulf

Saudi PDPL transfer rules and data residency.

11Do AI systems handling government or critical data meet NCA cybersecurity controls? Gulf

Saudi National Cybersecurity Authority requirements.

12Have you checked how AI vendors use, store and train on your data?

Contract terms, sub-processors, retention.

Questions about this check

What should an AI governance framework cover?
Accountability, risk and impact assessment, transparency, testing and monitoring, human control and data location. In Australia these map to the six practices in the Guidance for AI Adoption.
What changes on 10 December 2026 in Australia?
Organisations covered by the Privacy Act must explain in their privacy policy when they use personal information in automated decisions that could significantly affect people.
Is this legal advice?
No. It's a quick self-check to find gaps. Talk to your legal team about your obligations.

Talk to the company behind BLDR.

Briefings for boards, CIOs and procurement teams, in Sydney, Dubai and Riyadh.

Book a consultation Explore BLDR
Book a consultation