Trust Stack · Layer 04
Oversight
A name on the door for AI
What this layer means
Oversight means one person in your business is accountable for AI. They know which tools are in use and what the policy says.
It also means having a written AI policy that staff have actually read. And it means having a review step before new AI tools are introduced, so someone checks whether the tool is safe, appropriate and necessary before the whole team starts using it.
Why SMEs should care
- The EU AI Act's transparency rules apply from August 2026 and the high-risk deadlines have moved to December 2027, so SMEs have time to prepare
- In a 2026 Trinity College Dublin and Microsoft Ireland survey of 250 Irish organisations, 30% of those with a formal AI policy reported major productivity gains, against 3% of those without one
- Without oversight, AI adoption becomes chaotic and risky
- A simple one-page policy is more useful than a 20-page document nobody reads
Common failure patterns
- No one knows who is responsible for AI decisions
- AI policy exists but no one has read it
- New AI tools adopted without any review of data or security implications
- No process for reviewing or updating AI practices as tools evolve
Questions leaders should ask
- Who in our business is accountable for AI?
- Do we have a written AI policy that staff have actually read?
- Do we review new AI tools before they are adopted?
- When was the last time we updated our AI practices?
Start here
A practical first action
Write a one-page AI policy. It should cover: what tools are approved, what data is safe to share, who is accountable, and what to do if something goes wrong. Have every team member read it. Review it every six months. That is it.
How does your business score on Oversight?
The AI Readiness Scorecard measures your position across all five Trust Stack layers in about ten minutes.
Start with a thirty-minute conversation
Book a free consultation. We map your specific challenges and identify practical next steps. No sales pressure, just useful advice.