Service · Governance

AI Governance for financial and professional services.

In regulated financial and professional services, governance is not a later phase. It is part of the product. Airclerk designs the controls, approvals, audit trails, cost controls and operating model required for production Claude workflows.

01 / The framework

Eleven questions every Claude workflow must answer.

G-01
What can Claude access?
G-02
What can Claude recommend?
G-03
What must Claude not do?
G-04
When is human approval required?
G-05
What gets logged, and where?
G-06
How is evidence captured?
G-07
How are outputs reviewed?
G-08
How are incidents handled?
G-09
How are workflows evaluated?
G-10
How is AI usage monitored over time?
G-11
What does each workflow cost to run, and how is spend controlled?
02 / Principles

Our governance principles.

P-01

Human-in-the-loop by design

Critical decisions are reviewed by people. The model proposes, humans dispose - and the system records both.

P-02

Permission-aware access

Claude inherits the user's permissions. No bypassing the existing access model.

P-03

Auditability as a feature

The assistant records each step as it works — what the user asked, the tools and systems it used, the evidence it referenced, and the decisions and outputs it produced — with traceable provenance.

P-04

Evidence capture

Outputs cite their source documents and the reasoning path that produced them.

P-05

Clear system boundaries

What Claude can read, write and trigger is defined per workflow, not per organisation.

P-06

No black-box production decisions

If we cannot explain why a workflow produced an output, it does not ship to production.

P-07

Predictable cost, not surprise bills

Per-workflow budgets, token and tool-call limits, model-tier routing and usage alerting. Finance sees what AI is costing before the invoice arrives.

First step

Assess your Claude production readiness.

The Readiness Sprint includes a full governance and controls model for the recommended first workflow.

View the sprint
03 / Common questions

AI Governance FAQ.

01What does Airclerk's AI governance work cover?

Airclerk designs the controls, approvals, audit trails, cost controls and operating model required to run Claude workflows in production. The work resolves eleven questions every workflow must answer — from what Claude can access, recommend and must not do, to when human approval is required, what gets logged, how evidence is captured, how outputs are reviewed, how incidents are handled, and how AI usage is monitored over time.

02Which regulatory regimes does the governance model map to?

Airclerk designs governance for firms operating under FSLAA / FAP, CoFI and FMA conduct expectations in New Zealand, and ASIC RG 271, APRA CPS 230 and CPS 234 in Australia, alongside the Privacy Act and the Contracts of Insurance Act 2024. Airclerk helps you evidence these obligations; meeting them remains the firm's responsibility, and Airclerk does not provide legal advice.

03How does AI governance relate to Airclerk's AI Process Assurance?

Governance defines the controls, approvals and boundaries a workflow must operate within; AI Process Assurance is how that work is made evidenced and provable. The assistant records each step as it works — what was asked, the tools and systems it used, the evidence it referenced, and the decisions and outputs it produced — with traceable provenance, capturing the work that runs through the instrumented workflows rather than claiming to capture everything.

04How do firms keep AI spend predictable under this model?

Each workflow gets its own budget, with token and tool-call limits, model-tier routing and usage alerting, so finance can see what AI is costing before the invoice arrives. Cost is treated as a governance question in its own right — every workflow must answer what it costs to run and how that spend is controlled.

05How do firms get started with AI governance?

The first step is the two-week Claude Production Readiness Sprint, which includes a full governance and controls model for the recommended first workflow. You can also request a governance pack through the contact page if you want to review the framework first.