For boards, CFOs, and general counsel
AI governance as fiduciary duty.
Certification is not a values question. It is a liability question, an insurance question, and increasingly a cost-of-capital question. Directors, audit committees, and institutional investors are now expected to understand AI exposure as a category of organisational risk — and to evidence that understanding when asked.
Ethicality certification produces the evidentiary baseline that exposure assessment, D&O renewal, and investor due diligence now require. This page is for the people who sign the cheque.
Section 01
Three questions every board should be able to answer about AI.
- 01Do we know every AI system currently operating in our organisation?
- 02Who is personally accountable if one of those systems causes harm?
- 03Can we demonstrate to a regulator that we assessed those systems before deploying them?
If the answer to any of these is "not clearly", Ethicality certification creates that documentation.
Section 02
What institutional investors are asking.
AI governance has moved from emerging-issue to standard due diligence category. UNPRI, ISS, and Glass Lewis questionnaires now include AI-specific governance sections covering accountability, risk assessment, and third-party assurance.
UNPRI
Responsible AI governance disclosure as part of the broader responsible-tech category.
ISS
AI risk oversight included in director-effectiveness scoring.
Glass Lewis
AI-policy disclosure expected in 2026 proxy-season guidance.
Section 03
What certification produces for the board record.
- ✓Named AI accountability officer, documented
- ✓Risk register for all material AI systems
- ✓Third-party assessor sign-off (not self-declaration)
- ✓Incident response protocol
- ✓Annual surveillance review schedule
Section 04
The insurance and cost-of-capital question.
Cyber, E&O, and D&O insurers are beginning to ask about AI governance documentation at renewal. The moment that question appears on a renewal questionnaire, AI governance stops being an ethics conversation and becomes a premium conversation.
At renewal
Documented AI accountability officer, risk register, and third-party assessment are increasingly line items on insurer questionnaires.
After an incident
The first question from counsel and the insurer is the same: what evidence do you have that this system was assessed before deployment?
In a financing round
Lenders and institutional investors now include AI governance in standard due diligence. Absence of documentation is a flagged item, not a neutral one.
Ethicality certification is designed to produce exactly the evidence those questionnaires request — without retroactive scrambling, and without redirecting the engineering organisation to compliance work it did not plan for.
Section 05
What to put on the next agenda.
- Name the AI accountability officer in the board minutes.
- Request a single-page register of every material AI system in operation.
- Ask management to obtain third-party certification on a defined timeline — and to budget for it as a risk-management line item, not a discretionary spend.
The cost of certification is materially lower than the cost of answering any of these questions for the first time during an enforcement action or insurance claim.