Your First 90 Days of AI Governance

AI governance feels enormous until you give it a deadline. Here's a 90-day plan that fits on an index card.

Days 1–30: Inventory. List every AI tool in the organization — approved or not — plus what data each touches and who owns it. You now know what you're governing.

Days 31–60: Rules and roles. Write the one-page policy: who approves new tools, what's off-limits, who's accountable. Name names. A policy without an owner is a wish.

Days 61–90: Test and document. Pick your highest-stakes tool. Run it through realistic test cases, check for unfair outcomes, write down what you found and what you fixed. You now have a working example of governance, not just a document about it.

Ninety days from now, you'll be ahead of most organizations in America. Start the clock.

I explain frameworks; I don't give legal counsel.