The policy the board did not argue about
A CQC-regulated community healthcare provider needed an AI policy before their next funder visit, and quickly, but had no internal expertise to write one.
A tailored AI Governance Pack: policy, risk register and staff guidance written for how the organisation actually works, delivered in under a week.
The funder visit was in ten days. The CEO knew the question was coming, "what is your AI policy?", and the honest answer was that they did not have one. There was no internal expertise to write one, and the generic templates they had found online read like they were written for a tech company, not a CQC-regulated healthcare provider.
The AI Governance Pack was written for how the organisation actually works: the policy, a risk register with likelihood and impact scoring, and staff guidance in plain English. It named the tools staff were already using informally and set clear boundaries around what was permitted, what needed sign-off and what was not allowed at all.
It was delivered in under a week, adopted unanimously at the next board meeting, and passed funder review with no amendments. The CEO later said it was the first governance document the board had ever approved without a single redline.
Policy adopted unanimously at the next board meeting. Passed funder review with no amendments requested.