Skip to content
AIGMS™ | Artificial Intelligence Governance Management System Skip to content
In development The AIGMS Verification Programme is in controlled development and is not open for public applications. Read what it covers and register your interest at no cost.
A practical AI governance management system for UK organisations

Know where AI is used.
Govern the consequences.
Keep the evidence.

AIGMS (Artificial Intelligence Governance Management System) is a documented system for governing artificial intelligence in day-to-day operations. It covers the AI Governance Policy, the Activity Register, Consequence Profiling, Safeguard selection records, competence and training, incident reporting and the records that show how AI Activities are governed and reviewed.

Proportionate to the consequences, designed for implementation and built to leave an evidence trail.

Framework version 3.1, published May 2026 Three implementation packages, four optional extensions and a bundle
Activity Register
Illustrative extract, shown in the AIGMS™ format
Illustrative extract from an AIGMS™ Activity Register
Activity ReferenceActivity NameCategoryConsequence RatingStatus
AIA-001Email drafting assistantContent GenerationNegligibleActive
AIA-002CV screening supportDecision SupportSignificantUnder Review
AIA-003Invoice processingAutomationModerateActive
AIA-004Customer chatbotInteractionModerateActive
AIA-005Demand forecastingAnalysisNegligibleActive
The position most organisations are in

AI tools can arrive before the rules. Can you show what is used and how it is governed?

AI can enter an organisation through individual initiative rather than a formal decision, which means tools may arrive before the rules. When a client, insurer, regulator or tribunal asks how a particular AI-assisted decision was made, operating records provide a more reliable answer than reconstruction after the event.

  • You cannot govern what you have not identified, so AIGMS makes discovery and registration part of implementation.
  • A policy without operating records is only a document, not a governance position.
  • The practical difficulty is being unable to describe what is in use, who owns it and how it is governed.
What the system is for

What AIGMS helps your organisation demonstrate

A governance position becomes credible when operating records support it, so AIGMS is designed to leave an evidence trail.

01

Every AI Activity is identified and owned

Each Activity carries a reference, a description, a named Accountable Person and a status, recorded against twelve minimum fields.

02

Consequence Profiling works the same way every time

Five Consequence Domains, a four-point scale and an overall Consequence Rating taken from the highest domain score rather than an average.

03

Safeguards are chosen and recorded, not assumed

Safeguards are selected from the Safeguard Catalogue for each individual AI Activity, in proportion to its Consequence Rating, with the reasoning kept in Safeguard selection records.

04

People know what they may and may not do

Four Competence Levels from AI Aware to Governance Lead, each with its own scope, duration and refresh cycle.

05

Provider reliance is assessed and recorded

Where an organisation relies on an AI provider, its data practices, contractual position and operational dependencies are assessed through the relevant Safeguards.

06

Evidence is kept as the system operates

The Governance Evidence Pack has ten minimum contents, retained for at least three years from creation or from retirement of the associated AI Activity, whichever is later.

How it works

The nine-step Implementation Pathway

AIGMS is established through nine steps, each with its own objective, actions and completion criteria. The Pathway builds the system for the first time. After that the organisation reviews each AI Activity at the frequency its Consequence Rating requires, supported by Assurance Review.

Step 1
Secure leadership commitment
Senior leadership formally agrees to implement AIGMS and commits the time and money. A Governance Lead is appointed and the decision is recorded.
Step 2
Draft the AI Governance Policy
A signed, dated AI Governance Policy reflecting the six Governing Principles and the way the organisation actually works.
Step 3
Build the Activity Register
Every AI Activity identified and recorded against the required fields, including Activity Reference, Activity Name, Accountable Person and Status, with Shadow AI discovery running alongside.
Step 4
Conduct Consequence Profiling
Each AI Activity profiled across the five Consequence Domains, with the overall Consequence Rating taken from the highest domain score rather than an average.
Step 5
Select and assign Safeguards
Safeguards chosen from the Safeguard Catalogue for each individual AI Activity, with the reasoning captured in Safeguard selection records.
Step 6
Deliver training
People brought to the Competence Level their role requires, from AI Aware through to Governance Lead, with the Training Record to show it.
Step 7
Establish the Governance Evidence Pack
The ten minimum contents gathered, organised, dated and version controlled, with an Evidence Pack Index and retrieval tested.
Step 8
Schedule the first Assurance Review
A date in the diary and a cadence set by the Consequence Ratings present, with senior leadership availability confirmed.
Step 9
Conduct maturity self-assessment
The organisation places itself on the AIGMS Maturity Model through a Maturity Self-Assessment and sets a target level for the year ahead.

Review frequency follows the Consequence Rating. Negligible AI Activities are reviewed annually, Moderate six-monthly and Significant quarterly. Critical AI Activities are reviewed monthly or continuously. Every organisation also runs a full annual Assurance Review. Read the Implementation Pathway in full.

A note on how this is shown. The nine steps above are the AIGMS Implementation Pathway as published in the Framework Document. Any simplified diagram used elsewhere on this website is a website explanation of that Pathway rather than a separate AIGMS structure.
For whoever got handed AI governance

Three packages, each one finishes a job

Most organisations start in the same place. AI is already in use, nobody owns it and nobody could describe it if a client asked tomorrow. Each package answers one question: how far does your organisation want to take its own implementation?

Each package contains everything in the package below it, with the Integrated Governance Workbook stepping up to the higher edition rather than arriving alongside the old one. Every package arrives as two downloads, a Core Toolkit holding the working system and a Training Library holding the courses.

Foundation

AIGMS Foundation Pack

Visibility and a controlled starting point

£127

Start governing AI use with clear leadership, a practical AI Governance Policy, an Activity Register and a structured way to discover Shadow AI.

  • AI Governance Policy Template and Acceptable Use Statement
  • Foundation edition of the Integrated Governance Workbook, holding the Activity Register
  • Shadow AI Discovery Checklist and Shadow AI Report Form
  • Implementation Handbook, Framework Document, Glossary, FAQ and two reference cards
  • Governance Lead Appointment Record and New AI Activity Approval Request
  • Level 1 AI Aware training: slides, briefing, handout, practical task, question bank and assessment
Foundation supports Pathway steps 1 to 3. Consequence Profiling and Safeguard selection begin at Operating, so Foundation is not a complete route to verification readiness.
Start with Foundation

Instant download, two files. Open the Read Me First and you will know what to do next.

Assurance

AIGMS Assurance Pack

Review, evidence and improve how the system operates

£447

Add the records and working tools needed to review, evidence and improve how AIGMS operates. This is the most direct AIGMS package route towards verification readiness, although readiness and verification remain separate decisions.

  • Everything in Operating, with the workbook stepped up to the Assurance edition
  • Assurance Review Report Template, covering the six areas every review must examine
  • Maturity Self-Assessment against the AIGMS™ Maturity Model, with an improvement record
  • AI Incident Report and Investigation Form, plus the full Shadow AI Discovery Toolkit
  • Governance Lead Communications Pack and Governance Lead Rhythm Card
  • All four training levels, as in Operating
Get the Assurance Pack

Instant download, two files. Already on Operating? Contact us to upgrade for £150.

Framework version 3.1 Every package is an internal implementation licence for the purchasing legal entity Upgrade any time at the difference in price, arranged directly

Each package is built around one Integrated Governance Workbook, so the records that have to agree with each other live in the same file rather than drifting apart across several.

Four optional extensions, £49 each

Take only the parts that apply to you. None of them is needed to operate AIGMS. Each one names the package it needs.

£49

Care Sector Extension

A ready made starting point for the AI Activities a care provider is most likely to be running, so you are not translating generic examples into your own service.

Needs Operating or Assurance
£49

Board and Leadership Extension

For the meeting where somebody has to explain AI governance to the people who approve the budget. A briefing pack plus worked case studies to argue from.

Needs Any package
£49

Sector Application Extension

Shape the framework around how your own sector works, using an application guide and a case study template rather than starting from a blank page.

Needs Operating or Assurance
£49

Regulatory Update Resource

The UK regulatory picture in one place, so you are not assembling it from press coverage. Time sensitive, so check it against official sources before you rely on it.

Needs Any package
Commercial bundle

AIGMS Assurance and Extensions Bundle

The AIGMS Assurance and Extensions Bundle combines the Assurance implementation materials with all four extensions listed above. It is a commercial bundle rather than a fourth package level, so it adds breadth of internal use rather than a further stage of the system.

  • Everything in the AIGMS Assurance Pack
  • Care Sector Extension
  • Board and Leadership Extension
  • Sector Application Extension
  • Regulatory Update Resource

What the bundle does not include

Verification, an Entry Check, assessment, independent decision work, renewal and professional licensing are separate and are not included. The bundle grants no AIGMS Verified status, no Status ID and no licence to use the AIGMS Verified Mark.

Ask about the bundle

Already have a package?

Every upgrade costs the difference between the two package prices, so reaching Assurance costs £447 whichever route you take. An upgrade delivers only the material you do not already hold.

Upgrades are arranged directly rather than bought from the shop. Get in touch and tell us which package you hold. Once your entitlement is confirmed you will receive a payment link for the correct route.

Every upgrade carries transfer guidance. Keep your existing workbook as the master record until your Governance Lead has reconciled the new edition against it.

  • Foundation to Operating
    New core material plus training Levels 2 to 4. For organisations holding the Foundation Pack.
    £170
  • Operating to Assurance
    New core material only, since Operating already carries all four training levels. For organisations holding the Operating Pack.
    £150
  • Foundation to Assurance
    Both steps in one, delivering everything Operating and Assurance add. For organisations holding the Foundation Pack.
    £320
What a purchase gives you. AIGMS packages are internal implementation products. Purchase grants the named purchasing legal entity a customer package licence to use the included materials for its own internal implementation. It does not grant AIGMS Verified status, a Status ID, use of the AIGMS Verified Mark, a professional licence, assessor authority or permission to deliver AIGMS services to another organisation. Passing an included course assessment leads only to the Certificate of Achievement stated for that course. It does not itself assign an internal Competence Level or grant professional licensing.
Compare

What is in each package

Each package contains everything in the package below it. The one exception is the Integrated Governance Workbook, which steps up to the higher edition rather than arriving alongside the old one. The four optional extensions sit outside this table, because any of them can be added to the package that supports it.

Contents of the three AIGMS™ packages
Included Foundation £127 Operating £297 Assurance £447
Framework Document, Glossary, FAQ and reference cards
Implementation Handbook
AI Governance Policy and Acceptable Use Statement
Activity Register
Shadow AI discovery
Governance Lead Appointment Record
New AI Activity Approval Request
Level 1 AI Aware training
Consequence Profiling and Consequence Rating
Safeguard Catalogue and Safeguard selection records
Governance Evidence Pack Index and Checklist
Transparency and disclosure notices
Data protection tools: privacy notice and DPIA guidance
Bias and fairness assessment
Provider review and continuity planning
Incident reporting and records
Individual Concern and Challenge Form
Governance Lead Starter Toolkit
Training Levels 2, 3 and 4
Assurance Review and Assurance Review Report Template
Maturity Self-Assessment and improvement record
AI Incident Report and Investigation Form
Shadow AI Discovery Toolkit
Governance Lead Communications Pack and Rhythm Card
Integrated Governance WorkbookFoundation editionOperating editionAssurance edition
Training levelsLevel 1Levels 1 to 4Levels 1 to 4
Downloads222
Implementation Pathway steps1 to 31 to 7All nine

Scroll the table sideways on a small screen.

In development

The AIGMS Verification Programme

The AIGMS Verification Programme is in controlled development and is not yet open for public applications. You may register your interest at no cost. Purchasing a package does not reserve an assessment place or create any entitlement to AIGMS Verified status.

When it opens, the programme will add an independent examination of the governance evidence your organisation already produces, so a customer, a commissioner, an insurer or a board can see that somebody other than the people who produced it has examined it.

Controlled development  ·  Public applications not open

What AIGMS Verified will confirm

  • A named legal entity met the AIGMS Verification Requirements for a stated scope
  • An assessor examined sampled operating evidence covering a defined assessment period
  • A separate authorised decision maker granted the status, never the assessor
  • The exact scope, AIGMS version, dates and current state appear on a public register
  • The status runs for a fixed period, then expires unless it is renewed

What it will never mean

  • AIGMS Verified is a private verification status rather than certification. No organisation may describe itself as AIGMS Certified.
  • It does not confirm legal compliance or the safety, accuracy or performance of any AI tool, product, AI Activity or output
  • It does not transfer responsibility. Senior Leadership, the Governance Lead and every Accountable Person stay accountable.
  • It cannot be bought. Package purchase and course completion never grant status, a practitioner licence, authority to assess another organisation or approval to use the AIGMS Verified Mark.
  • Only an organisation holding Current AIGMS Verified status may receive a licence to use the AIGMS Verified Mark.
Stage 01

Application

The applicant states the legal entity, the proposed scope and the evidence period. There will be no charge to submit the initial application form, whichever package the organisation holds.

Stage 02

Entry Check

A separately charged stage confirming identity, scope, operating evidence, declared relationships and conflicts. It records Ready for assessment planning, Clarification required or Not ready. It promises neither acceptance for assessment nor status.

Stage 03

Assessment

An assessor examines the AI Governance Policy, the Activity Register, the Governance Evidence Pack and the latest Assurance Review, samples AI Activities in proportion to their Consequence Ratings, then tests practice through interviews and walkthroughs.

Stage 04

Independent decision

A different authorised person reviews the complete case record then grants, refuses or defers the decision. A granted decision produces a Verification Statement, a public register entry and a time-limited Status Mark Licence.

Before the assessor finalises the report you will get the chance to correct factual errors. Where evidence is incomplete you will get a defined period to supply it rather than an immediate refusal. Sales activity stays separate from assessment. Fees pay for work performed and do not depend on the outcome.

Buying a package does not grant verified status

Implementation, learning, professional licensing and organisational verification are separate offers with separate entitlements under the AIGMS Status and Entitlement Decision. Use the table before you order.

What each AIGMS™ offer gives an organisation and what it does not
Offer What it gives you What it does not give you
Buying a package A customer package licence for the named purchasing legal entity to use the materials for its own internal implementation, plus an accurate statement that the organisation uses or has adopted AIGMS. No AIGMS Verified status, no Status ID, no licence to use the AIGMS Verified Mark, no professional licence and no right to deliver AIGMS services to another organisation.
Passing a course The Certificate of Achievement stated for that course, plus an accurate statement that the named course assessment was passed. It does not itself assign an internal Competence Level. No practitioner licence, no assessor authority and no organisational status.
Independent verification
Not yet open
Will give AIGMS Verified status for a named legal entity, recorded scope and AIGMS version, shown on a public register for a fixed period, with a time-limited Status Mark Licence. No guarantee of legal compliance, no approval of any AI tool or output and no cover for a group company that was not assessed.

Scroll the table sideways on a small screen.

Getting ready while the programme is built

Verification will examine how AIGMS actually operates in your organisation rather than which documents you bought, so readiness comes from running the system. An applicant will need at least one completed Assurance Review plus a real period of operating evidence. The public minimum will be confirmed from what the pilot shows.

The Assurance Pack is the most direct AIGMS package route towards readiness because it carries the Assurance Review, incident reporting and records, Shadow AI discovery and the Governance Evidence Pack material an assessment examines. Buying it remains optional, because equivalent evidence from any AIGMS implementation may be accepted where it demonstrates the same requirement for the same scope and period.

  • A signed AI Governance Policy with a complete Activity Register
  • A current Consequence Profile and Safeguard selection record for every Active or Under Review AI Activity in scope
  • Competence evidence for the people who use and review AI Activities
  • A Governance Evidence Pack you can actually put in front of somebody
Pilot group forming

Register your interest or ask about the pilot

Registering interest costs nothing and commits you to nothing. It puts you on the list to hear when public applications open.

Separately, the controlled pilot is by invitation. The pilot group will be three to five UK SMEs from at least two sectors, each putting a real AIGMS implementation in front of the draft requirements, with two assessors examining at least two of the evidence sets independently so the programme can test whether competent people reach the same conclusions.

The pilot creates no public status decision, Status ID, register entry or right to use the AIGMS Verified Mark. A participant receives a Pilot Assessment Report and helps shape the requirements before anybody else sees them.

Register interest at no cost

Use the contact form below. Write Verification in your message and say whether you want the register of interest or a conversation about the pilot.

The boundary that sits beside every use of the status. AIGMS Verified is a private verification status. It is not UKAS accredited, government approved or regulator endorsed. Verification remains optional, because an organisation may implement and operate AIGMS in full without ever applying for it.
Programme status Controlled development. Public applications not open.  ·  Blueprint Version 1.0, 5 August 2026
Public launch Public applications will open only after the pilot and every launch gate have been completed.
Launch gates Approved programme documents, completed pilot cases, assessor competence, independent decision arrangements, secure information handling, published complaints and appeals routes, a live public register, approved mark and licence arrangements, approved commercial terms, legal and insurance review, website and sales checks, then a recorded launch approval. A partly complete gate cannot be accepted through a commercial exception.
In practice

What a governed AI Activity looks like

This illustrative AIGMS record shows one AI Activity taken through registration, Consequence Profiling and Safeguard selection with the required approval route identified.

AIA-002 CV screening and shortlisting support
Register entry
Activity ReferenceAIA-002
CategoryDecision Support
DescriptionApplications ranked against role criteria, producing a suggested shortlist for a hiring manager to review
AI ProviderRecruitment platform, assessed before reliance
Data InputsCVs and covering letters, including personal data and data revealing protected characteristics
Accountable PersonHead of People
StatusUnder Review
Consequence Profile
People Harm3
Financial Exposure2
Legal and Regulatory Liability3
Reputational Damage3
Operational Disruption2
Overall Consequence Rating3 Significant

The overall rating is the highest individual domain score, never an average. Three domains score Significant here, so the Activity is governed as Significant even though two domains are only Moderate.

Governance that follows
Safeguards appliedSelected from the Safeguard Catalogue for this AI Activity, with the reasoning recorded in the Safeguard selection record
Review frequencyQuarterly
Approval authoritySenior Leadership
Re-profiling triggersMaterial modification, provider change, data change, an AI Incident, regulatory change or the scheduled review falling due
SG1 Foundation · 6 of 6 · universal
SG1-01SG1-02SG1-03SG1-04SG1-05SG1-06
SG2 Transparency and Disclosure · 5
SG2-01SG2-02SG2-04SG2-05SG2-06
SG3 Data Integrity · 4
SG3-01SG3-02SG3-04SG3-05
SG4 Human Oversight · 4
SG4-01SG4-02SG4-03SG4-05
SG5 Accuracy and Reliability · 4
SG5-01SG5-02SG5-03SG5-06
SG6 Fairness and Non-Discrimination · 4
SG6-01SG6-02SG6-03SG6-04
SG7 Continuity and Dependency · 1
SG7-02
Evidence retained: Consequence Profile, Safeguard Selection Record, provider assessment, Level 3 competence records for every reviewing manager, the approval record and the register version history. Every Safeguard in SG1 applies to every Activity regardless of rating, so the six Foundation Safeguards are present here and everywhere else on the register.

A policy states the position. Evidence demonstrates how governance operates.

The Governance Evidence Pack is a curated set of records rather than everything the organisation has ever written about AI. It has ten minimum contents, built as the system operates instead of assembled only when somebody asks.

  • 1Current AI Governance Policy, signed and dated
  • 2Current Activity Register
  • 3Completed Consequence Profile for every AI Activity
  • 4Safeguard selection record for every AI Activity
  • 5Assurance Review records, with findings, actions and closure dates
  • 6Training Records showing Competence Level achievements
  • 7AI Incident Reports and the Incident Log
  • 8Shadow AI discovery records
  • 9Transparency and disclosure communication records
  • 10Version history of the AI Governance Policy and the Activity Register

Organisations may add further records where these arise naturally from operation. The Governance Lead Appointment Record is useful supporting evidence of accountability at leadership level, although it does not count as an eleventh minimum item.

Records must be retained for at least three years from creation or from retirement of the associated AI Activity, whichever is later. Longer retention applies where legal, regulatory or contractual requirements demand it. In a regulated sector the sectoral retention rules typically govern.

Every Assurance Review covers six areas
  1. Completeness of the Activity Register
  2. Currency of Consequence Profiles
  3. Safeguard effectiveness
  4. Incident review
  5. Competence and training
  6. Changes to the regulatory and legal landscape

Assurance Review is the organisation’s own structured review of its own management system. Review frequency follows the Consequence Ratings present. Every organisation runs a full annual Assurance Review.

Regulatory context

Built with UK legal and regulatory expectations in view

AIGMS helps organisations organise governance work relevant to existing UK legal and regulatory expectations. It does not determine legal compliance, replace legal advice or replace any assessment required by law.

UK GDPR and the Data Protection Act 2018

Lawful basis, data protection impact assessments, automated decision-making and international transfers

Data (Use and Access) Act 2025

All data protection provisions are in force, including revised rules and safeguards for significant automated decisions

Equality Act 2010

The nine protected characteristics, bias assessment and monitoring for adverse impact

ICO guidance on AI and data protection

Accountability, transparency and the ability to demonstrate rather than assert

DSIT cross-sector principles

Safety, security and robustness; appropriate transparency and explainability; fairness; accountability and governance; contestability and redress

Sectoral regulators

ICO, FCA, CMA, Ofcom and CQC, with expectations relevant to organisations in their respective remits

AIGMS is an independently created governance management system rather than a standard. An organisation with potential EU exposure must assess its EU AI Act position separately. The AI Omnibus entered into force on 27 July 2026 and revised the application dates for high-risk systems. AIGMS does not itself establish EU AI Act compliance.
Framework version 3.1  ·  Page last reviewed 3 August 2026  ·  Next scheduled review 3 August 2027
Framework information See how the framework is built
Current-source checks ICO update on the Data (Use and Access) Act 2025  ·  European Commission update on the AI Omnibus
Methodology and review

How AIGMS is maintained

AIGMS is an independently created governance management system with a stated version, publication date and version history.

Framework issue

The Framework Document carries a stated version

The current Framework Document is version 3.1. An organisation should record which framework version supports its implementation.

Review cycle

Reviewed on a schedule and when material changes require it

Methodology pages state the framework version, last review date and next scheduled review. Time-sensitive legal information must still be checked against current official sources.

Change record

Framework changes are recorded

The Framework Document contains a version history summarising each release, so organisations can identify which framework version they are using.

Independence

Independently created

AIGMS is independently created. It is not derived from, based upon or issued under any existing standard.

Separation of offers

Implementation, learning and verification are separate

Implementation packages, course achievement, professional licensing and organisational verification carry different entitlements. Each is ordered, contracted and priced separately.

Licence

Licensed to the purchasing organisation

Material is licensed to the named purchasing legal entity for internal implementation, staff training and the records created through that organisation’s use of AIGMS.

Questions

Before you buy

Do I need to be a compliance specialist to use AIGMS?

No. AIGMS is written for competent managers rather than compliance specialists, including business owners, operations managers, office managers and health and safety leads. The documents use plain English and include completion guidance. The organisation remains responsible for allocating time and competent people to implementation.

How is AIGMS different from an international standard?

AIGMS is an independently created governance management system rather than a standard. It is not derived from any certification scheme and it does not prepare an organisation for certification against one. It is built for UK organisations that need a documented, proportionate way to govern AI Activities and keep records of how they have done it.

We only use AI for basic tasks. Do we really need this?

The question is less about how much AI you use and more about what goes into it and what the output affects. Client data, HR information and financial records can create legal, contractual or operational duties regardless of how casual the use feels. AIGMS is proportionate, so a Negligible AI Activity attracts only the Foundation Safeguards while a Critical one attracts the full applicable suite selected for that AI Activity.

Is AIGMS a legal requirement?

AIGMS itself is not mandatory. Depending on the AI Activity, duties under UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 or the Equality Act 2010 may apply. AIGMS provides a structured way to organise relevant governance work and records. It does not replace legal advice or any assessment required by law.

How long does implementation take?

The nine-step Implementation Pathway typically takes six to ten weeks of elapsed time and around 20 to 40 person-hours of focused Governance Lead effort, plus stakeholder time across the organisation. These are indicative figures rather than a guaranteed schedule.

What is the difference between the three packages?

Each package contains everything in the package below it, except that the Integrated Governance Workbook steps up to the higher edition rather than arriving alongside the old one. Foundation covers Pathway steps 1 to 3, establishing leadership, the AI Governance Policy, the Activity Register and Shadow AI discovery. Operating adds Consequence Profiling, Safeguard selection, training Levels 2, 3 and 4 plus nine further specialist tools to give eleven in all, taking you through Step 7. Assurance adds Assurance Review, Maturity Self-Assessment and the improvement record across all nine steps. Upgrades are priced at the difference between package prices.

What is the Assurance and Extensions Bundle?

It combines the Assurance implementation materials with all four extensions. It is a commercial bundle rather than a fourth package level, so it adds breadth of internal use rather than a further stage of the system. Verification, an Entry Check, assessment, independent decision work, renewal and professional licensing are separate and are not included.

What is the Integrated Governance Workbook?

It is the single working file at the centre of each package, supplied in a Foundation, Operating or Assurance edition. Whatever your package supports lives in that one file and stays in step with itself, rather than sitting across separate documents that drift apart. The Foundation edition carries the Activity Register, ownership and the review record. The Operating edition adds Consequence Profiling and Safeguard selection records. The Assurance edition adds Assurance Review, Maturity Self-Assessment and the improvement record. When you upgrade, the new edition replaces the old one, so keep the previous workbook as the master record until your Governance Lead has reconciled the transfer.

I already own a pack. Do I have to buy again?

No. Your existing entitlement to use the materials you bought is unchanged, so each package upgrade is priced at the difference between package prices. Foundation customers who need Consequence Profiling, Safeguard selection or the ability to take a new AI Activity to approval should take the Foundation to Operating upgrade at £170. The Foundation to Assurance upgrade at £320 makes both steps at once. Operating customers need only the Operating to Assurance upgrade at £150, because all four training levels are already included. Every route to Assurance totals £447. Upgrades are arranged directly rather than bought from the shop, so contact us with the package you hold and you will receive a payment link for the correct route. Every upgrade comes with transfer guidance. Keep your current workbook as the master record until your Governance Lead has reconciled the new edition against it.

What do I actually receive?

Two instant downloads. The Core Toolkit holds the working system in numbered folders by task, starting with a Read Me First and the Implementation Handbook. The Training Library holds one folder for each level your package includes. Every level carries slides, a briefing, a handout, a practical task, a question bank and an assessment. Level 4 Governance Lead adds its own workbook. They are separate downloads because the training files are large. Word, Excel and PowerPoint files are editable and PDFs are reference material. Everything is licensed to the named purchasing legal entity.

What is the AIGMS Verification Programme?

It is an independent examination leading to AIGMS Verified status for a named legal entity and a recorded scope. An assessor examines sampled operating evidence, then a separate authorised decision maker grants, refuses or defers the decision. A granted status appears on a public register. The programme is in controlled development and is not yet open for public applications. You may register your interest at no cost.

What will verification cost?

There will be no charge to submit the initial application form, whichever package your organisation holds. A separately charged Entry Check confirms identity, scope, operating evidence and readiness before assessment planning begins. Assessment and independent decision work are quoted separately according to the scope. Fees pay for work performed and do not depend on the outcome. Verification is not free. No fee is published or payable while the programme remains closed.

If I buy a package now, will I have wasted my money once verification opens?

No. Implementation and verification are separate offers under the AIGMS Status and Entitlement Decision, so your implementation entitlement is unchanged by anything the Verification Programme does. Verification examines how AIGMS actually operates in your organisation rather than which documents you bought, which means the implementation work a package supports is the same work that produces the evidence an assessment looks for. Buying a package has never granted verified status and never will.

Do I have to buy a package to apply for verification?

No. The assessor judges the content and operation of your evidence rather than the document design or where it came from, so equivalent evidence from any AIGMS implementation may be accepted where it demonstrates the same requirement for the same scope and period. The Assurance Pack is the most direct AIGMS package route towards readiness. An applicant will need at least one completed Assurance Review plus a real period of operating evidence.

Will AIGMS Verified make my organisation certified or legally compliant?

Neither. AIGMS Verified is a private verification status that is not UKAS accredited, government approved or regulator endorsed. It does not confirm legal compliance or the safety, accuracy or performance of any AI tool, product, AI Activity or output. What it confirms is that an independent assessor examined sampled governance evidence against published requirements and that a separate decision maker accepted it. Only an organisation holding Current AIGMS Verified status may receive a licence to use the AIGMS Verified Mark.

Who maintains AIGMS and how often is it reviewed?

AIGMS is published under a stated framework version. The current Framework Document is version 3.1 and contains a version history summarising each release. Methodology pages state the framework version, last review date and next scheduled review. Time-sensitive legal information must still be checked against current official sources.

What is in the free guide?

The AIGMS Starter Guide is a practical introduction covering the six Governing Principles, the five Activity Categories, Consequence Profiling with a worked example, the Safeguard Catalogue and the nine-step Implementation Pathway. It is there to help you decide whether AIGMS suits your organisation. There are no sales calls and no obligation.

The AIGMS Starter Guide

A plain English introduction to governing AI in a UK organisation, covering what an AI Activity is, how consequences are profiled and what a governance record needs to contain.

  • The six Governing Principles explained
  • Consequence Profiling with a worked example
  • The nine-step Implementation Pathway
  • How the five Activity Categories work

Free guide with no sales calls or obligation.

Your details are used to send the guide. See our Privacy Policy for how we handle your information.

Start where your organisation actually is

Nobody starts with a governed AI estate. The organisations that end up with one wrote down what they had, profiled the consequences and kept the records as they went. Foundation gets it written down. Operating supports documented governance decisions about each AI Activity. Assurance lets you review, evidence and improve the whole system.

Instant download. Licensed to the named purchasing legal entity. Framework version 3.1.

Not sure which one fits? Describe what you already have in place and you will get a straight answer, including where the smaller package would do.

Interested in independent verification later? Register your interest at no cost. Public applications are not open.

Contact

Ask before you buy

If you are not sure which package fits your organisation, describe what you already have in place and what you need to demonstrate. The reply will explain which package appears to cover the work you need, based on the information provided, including where the smaller one would do. To join the AIGMS Verification Programme register of interest, write Verification in your message.

  • Use the form and we will reply to the address you provide
  • United Kingdom
  • Messages are handled in line with the website Privacy Policy

Send a message