01
Inventory
Find and document every AI use case in production or planned.
AI Governance Program Design
Govern AI before it reaches production
We help you inventory your AI use cases, check that the data behind them is ready, and put policies, roles and controls in place, aligned with the NIST AI Risk Management Framework and ISO/IEC 42001.
The Problem
AI is already in use. Is it governed?
Most organizations adopt AI faster than they govern it. The risk isn't the model alone; it's the data feeding it and the lack of clear ownership when something goes wrong.
Sound Familiar?
The signs of ungoverned AI.
If these challenges resonate, you are not alone — and you are closer to a solution than you think.
- AI use cases no one has inventoried
- No accountable owner when a model makes a bad decision
- Training and input data without lineage or quality checks
- Policies that lag behind what teams are deploying
What We Deliver
Executive consulting, not implementation overhead.
We focus on strategy, operating models, risk reduction, accountability, executive visibility, and business outcomes — led by a senior practitioner.
AI use-case inventory
A complete inventory of every AI use case in production or planned, with a risk tier assigned to each.
Accountable owners
A named accountable owner for every use case, so there is no ambiguity when something goes wrong.
Data readiness review
A readiness review of the data behind your highest-value use cases, covering lineage and quality.
NIST AI RMF gap analysis
A gap analysis against the NIST AI Risk Management Framework, prioritized by risk and effort.
AI policy set & risk-tiering
An AI policy set and a repeatable risk-tiering method your teams can apply as new use cases arrive.
Governance committee charter
A governance committee charter aligned to ISO/IEC 42001, with roles, controls and review cadence.
How It Works
Four steps from inventory to operating program.
02
Assess
Tier the risk and check whether the underlying data is ready.
03
Design
Put policies, roles, controls and a governance committee in place.
04
Operate
Review new use cases as they arrive and keep policies current.
Who It's For
Built for organizations moving fast with AI.
Whether you are scaling generative AI or answering regulator questions, we meet you where you are.
- Organizations deploying generative AI or machine learning
- Regulated industries, including financial services, healthcare and the public sector
- Teams answering AI questions from auditors, regulators or customers
Founding client offer: 20% off the Sprint and Enterprise tiers of any service, or the first 6 months of a Stewardship plan, for the first 5 clients who sign by December 31, 2026, in exchange for a testimonial or case study.
PACKAGES & PRICING
Start small, scale when ready, all at a fixed fee
Start with an inventory of what's already in use, or put a full program in place. Every package includes an AI use-case inventory, risk tiers, named accountable owners, data readiness findings, and an executive readout.
AI Use-Case Inventory
$4,500
See every AI use case in one place.
- Up to 15 AI use cases inventoried
- Risk tier and accountable owner for each
- Summary roadmap
- Delivered in 10 business days
- Paid in full at signing
- Fee credited toward the Assessment if you upgrade within 30 days
Recommended
AI Readiness Assessment
$14,500
Founding client price: $11,600
Know which use cases are safe to scale.
- Everything in the Inventory
- Data readiness review for your top 3 use cases
- Gap analysis against the NIST AI RMF
- Full 90-day roadmap
- Delivered in 3 weeks
- 50% at signing, 50% on delivery
AI Governance Program
$29,500
Founding client price: $23,600
Policies, roles and controls in place.
- Everything in the Assessment
- AI policy set and risk-tiering method
- Data lineage requirements for in-scope models
- Governance committee charter aligned to ISO/IEC 42001
- Delivered in 6 weeks
- 50% at signing, 50% on delivery
AI Oversight Retainer
From $5,500/month
Review new AI use cases as they arrive.
- Up to 25 hours a month
- Intake review for new AI use cases
- Policy updates as regulations change
- Quarterly AI risk review
- Month to month, cancel anytime
Guarantee: If any in-scope AI use case lacks a risk tier and a signed-off accountable owner at delivery, we keep working at no cost for up to 30 days, provided your team names an owner candidate for each use case and joins the sign-off sessions. Larger or multi-year programs are quoted separately.
Executive Action
Governance Problems Compound. They Rarely Resolve Themselves.
Today's governance challenges become tomorrow's:
- Audit findings
- Regulatory scrutiny
- Transformation delays
- Reporting failures
- Data quality incidents
- Executive escalations
The longer governance gaps remain unresolved, the more costly they become to address. Thornevale Group helps executive leaders identify, prioritize, and resolve governance challenges before they impact organizational performance, regulatory readiness, or strategic initiatives.
Start a Data Trust Quick-Start
Gain immediate visibility into:
- Governance maturity gaps
- Critical data gaps
- Data quality vulnerabilities
- Stewardship accountability issues
- Compliance weaknesses
- Enterprise risk exposure