AI governance should cover purpose, access, data handling, human review, transparency, supplier controls and appropriate use. Geco’s implementation should allow organisations to understand where AI is used and how professional accountability is maintained.