AI Strategy & Policy

Responsible AI doesn’t happen by chance. Build a practical AI strategy, with the governance needed to put it into operation.

The problem

Tools first, questions later

Most firms already have AI tools in use often before there is a clear strategy governing where they should be used, what data they can access and who is accountable.

The tools are rarely the risk. The absence of a decision about them is.

And the obligations are already yours. There is no separate FCA AI rulebook. AI use sits within your firm’s existing regulatory and legal obligations  which may include Consumer Duty, SM&CR, data protection requirements and other rules, depending on your activities, permissions and use case.

How it fits together

Strategy decides. Governance controls. Policy sets the rules.

1 · Strategy

Where should AI be used in this firm and where should it not?

2 · Governance & Policy

Who is accountable, what controls apply, how use is approved, monitored and evidenced, written into a policy the firm adopts.

3 · Implementation

Put the priorities into practice. We can build the selected workflows as a separate Automation & AI engagement.

01

AI Strategy — decide where AI belongs

We start from what your firm actually does, not from a technology shortlist. The output is a decision, in writing, that your leadership can act on.

  • Current-state assessment
  • Process and use-case mapping
  • Value weighed against risk, case by case
  • Priority order and sequencing
  • Architecture and vendor considerations
  • Implementation roadmap
  • Senior-management and board-ready recommendations
  • Where AI should not be used

02

AI Governance & Policy — put the controls around it

A policy on its own is not a governance framework. We connect it to ownership, approved tools and use cases, data controls, vendor assessment, human oversight, monitoring and escalation — creating a practical framework designed for compliance review and senior-management or board adoption.

Governance — the controls

Who is accountable for each use of AI, what is approved, how it is monitored, and what happens when something goes wrong.

Policy — the document

Those decisions written into clear organisational rules your compliance function can review and your staff can follow.

The engagement

Do it yourself, or have it done and evidenced

A firm that does this itself ends up with a policy. A firm that engages ends up with a policy plus the registers, controls and monitoring that prove it was followed.

Run it yourself

Regulator-Ready AI

£1,495 firm licence · up to five people
Online, self-paced · 8 modules + exit exam ·

Suits a firm with someone who can own this internally. You get the framework and the templates; you do the work and carry the evidence burden.

  • The framework and the templates
  • Exit exam and certification
Explore Regulator-Ready AI →
Most firms
We do it with you

AI Strategy & Governance

POA fixed fee once scoped · 2–3 weeks
Includes Regulator-Ready AI for three of your people

We evaluate your current use of AI, identify the obligations that apply to your firm, and deliver the registers, controls and monitoring that make the policy hold up in practice.

  • Ten governance deliverables
  • Evidenced against your actual AI use
  • Survives a file review
  • Your team trained to operate it
Book a Readiness Review →

Deliverables

Ten governance deliverables, not just a policy.

Yours to keep, whether or not you ever work with us again.

  1. AI policy
  2. Authorised tools register
  3. AI use-case register
  4. SM&CR accountability matrix
  5. Vendor assessment framework
  1. Data-handling controls
  2. Human-oversight rules
  3. Monitoring process
  4. Incident and escalation process
  5. Regulatory mapping

After the engagement

What happens next

You end up with a roadmap, a framework and ten governance deliverables. How you act on them is your choice — and the first of these routes costs you nothing further.

Route 1

Run it yourself

Take the roadmap and the deliverables in-house and work through them. Some clients do exactly that, and it is a legitimate outcome.

Route 2

Extend it across your firm

Regulator-Ready AI for three people is included in the engagement. Additional team access is available through the Academy, so the framework is applied consistently as new tools appear.

Route 3

We build it

We build the workflows you prioritised, starting with the one that returns the most time soonest.

MoiraCorp Academy — Technical Library

Not sure where your firm stands?

A 30-minute Readiness Review to understand what AI is already in use, where the opportunities are, and what governance sits around it.