Add-on service

AI ownership governance review

Most businesses can list their software. Very few can list the intelligence they own and operate: the automations, custom assistants, fine-tuned models and decision rules quietly making choices on their behalf. Ownership brings obligations. This review sets out what you own, what it commits you to, and who answers for it.

AI Ownership Governance Pricing

AI ownership governance answers three questions for UK SMEs: what intelligence do we own, what obligations come with that ownership, and who is accountable for its behaviour. It is a governance service, not a technical one, written for business owners and operations leads rather than engineers. The one-off ownership review is a fixed fee from £1,450, with optional ongoing oversight from £395 per month for businesses whose AI estate keeps changing.

From £1,450fixed fee one-off review · optional ongoing oversight from £395/mo

Best for: Businesses running custom automations, fine-tuned or self-hosted models, or AI-driven decision workflows, and anyone asked who is accountable for an AI system's behaviour.

AI ownership governance review includes

  • An ownership inventory: models, automations, agents, decision rules, open-weights and fine-tunes
  • Provenance record for each: who built it, on what data, on whose licence terms
  • Obligation map covering regulatory, operational, economic, security and provenance duties
  • Named accountable owner for every consequential system, with intervention rights written down
  • Update, drift and retraining cycle for each owned system
  • Authority boundaries: what each system may and may not do without a human
  • A board-ready ownership statement you can hand to a client, insurer or auditor

Why ownership is a governance question, not a technical one

When a business buys AI, the vendor carries much of the responsibility. When a business builds, fine-tunes, chains or self-hosts it, that responsibility moves in-house — usually without anyone deciding that it should. The people running the automation are rarely the people accountable for its behaviour, and nobody has written down which is which. This review makes ownership explicit before a client, insurer or regulator asks.

The three questions we answer

Every review is structured around the same three questions, and the output is a document you can act on rather than a report you file.

  • What intelligence do we own? Models, automations, decision systems, open-weights and fine-tunes
  • What obligations come with that ownership? Regulatory, operational, economic, security and provenance
  • Who is accountable for its behaviour? Named owners, update cycles, drift management and intervention rights

How the review runs

We work from what already exists — your Trestano register, your workflow tooling and a short set of interviews with the people who actually built or configured the systems. Nothing needs to be rebuilt or instrumented first.

  • Week 1 — inventory and evidence gathering across tools, automations and models
  • Week 2 — interviews with builders and operational owners
  • Week 3 — obligation map, accountability assignments and ownership statement
  • Debrief — a call with leadership to agree owners and intervention rights

How it fits the rest of the governance model

Ownership governance sits alongside our runtime controls — authority boundaries, live oversight, reversible actions, consequential system mapping and operational intervention. Together they support the same position: AI exposure is governance, not technology. Ownership tells you what you are answerable for; the runtime controls tell you whether authority was still valid at the moment a system acted.

Common questions

We only use off-the-shelf tools — is this relevant?

Often more than expected. Custom GPTs, configured agents, automation chains in Zapier or Power Automate and prompt libraries all create owned intelligence even when the underlying model is someone else's. If the review finds you genuinely own nothing, we say so and the fee is the honest answer to that question.

Is this the same as the AI register in the platform?

No. The register records the AI tools your business uses. This review covers the intelligence you own and operate, the obligations attached to it, and who is accountable for how it behaves. The two sit together, and findings are written back into your register.

What does ongoing oversight include?

A quarterly re-inventory, refreshed obligation mapping when a system changes, and confirmation that named owners and intervention rights are still accurate. It starts at £395 per month and can be cancelled at any time.

Not sure which you need?

Run the free AI register first — it takes about ten minutes and usually makes the answer obvious. Or tell us what you're dealing with and we'll point you at the right thing.

Not legal advice. Trestano provides governance tooling, documentation and practical guidance. It isn't a substitute for advice from a qualified solicitor or your own compliance team.