“What AI is running, what can it access, and can we prove it is under control?”
AI Governance & Assurance treats AI models and agents as part of how the business runs, not a separate inventory. Every AI tool, where it runs and what it can access sit in one register. Each regulation is mapped to the controls that satisfy it and the evidence behind them. Clear rules say which decisions an agent may prepare, which it may make, and which always come back to a person — and every agent’s cost and results sit beside its risk.
Rooms you open
Methods supported
Part of Govern & Deliver · How do we turn choices into governed outcomes?
The pressure
Teams are launching AI tools and agents with whatever access was handy. Nobody can say which ones have admin-level access or when that access was last reviewed. Regulations are arriving one at a time, and the answer to “are we covered?” is a slide. When an agent goes wrong, the damage is measured after the fact.
What it looks like today
What changes
An AI inventory spreadsheet
One register of AI tools, where they run and what they can access
Compliance reported as a percentage
Every regulation mapped to controls, with every gap visible
“Autonomous” as a label
Clear, recorded limits on what AI may decide — with a person making the judgment calls
Every regulation, mapped
The EU AI Act, ISO 42001, the NIST AI Risk Management Framework and your own internal standard, each mapped to the controls that satisfy it. A missing control shows up as a gap, not a percentage — next to a chart of impact against independence, where unapproved and unowned AI stay visible.
Where other tools stop
AI governance tools give you an inventory and a risk dashboard. They cannot see what an agent costs, what it touches across the business or whether it earned its budget.
The rooms
Each room answers one question a leader actually asks, with the view that answers it and the measures that say whether it is working.
A room is a ready-made view that answers one leadership question, built on the same shared data as every other room.
Room 01
“What AI is running, where, and what can it access?”
Every AI tool, deployment and access permission in one register, with the gaps shown plainly.
How you know it is working
Room 02
“Are the controls in place, proven and current — and is the value real?”
Each regulatory requirement beside the controls that satisfy it, the evidence behind them and the measured results.
How you know it is working
Room 03
“Which decisions may AI make, and which must come back to a person?”
Each type of decision with who prepares it, who approves it and what evidence is needed — AI on one side of the line, people on the other.
How you know it is working
Where judgment sits
AI reads the shared model, prepares the decision and lays out the trade-offs. The decision itself is recorded against a named person.
AI prepares
Context, options, cost and impact assembled before the meeting.
AI may act
Within recorded limits, with a spending cap and a full audit trail.
People decide
Trade-offs, funding and anything outside the limits come back to a person.
Who it is for
“What can our AI access, and has that been reviewed?
“Which AI can go live, and what is it allowed to do?
“Are we covered for the regulations that apply to us?
“What is our exposure if an agent goes beyond its limits?
What it replaces
How it is licensed
AI Governance & Assurance is licensed within Govern & Deliver, with Strategic Portfolio Management included underneath.
Start with one portfolio, one product area or your architecture team. Strategic Portfolio Management is included automatically with every module.
See pricingMethods and frameworks
Dotwork does not ask you to adopt a new method. The frameworks your teams run become views over the same model.
AI-Native SAFe
SAFe with AI doing the preparation and people making the decisions.
Tokenomics
What AI actually costs per task, per team and per outcome.
CLEAR
Strategy to execution, connected and measured.
More in Govern & Deliver
The model underneath
Steer, Fund & Optimize and Govern & Deliver all read and write the same Enterprise Operating Model. The first module you license builds the model. Every module after it adds context instead of another silo — and Dotwork AI reads all of it, stopping where the decision is yours.
See the Enterprise Operating Model© 2025-2026 Dotwork, Inc. All rights reserved.