AI governance policy

VGrid.ai presents governance as an ongoing activity: understand the use, identify obligations and risks, relate controls and evidence, and record decisions and reviews.

This policy guides communication and demonstrations on the public website. It does not replace each customer’s AI policy or certify a VGrid management system.

• Context and proportionality: assess the purpose, impact, risk and autonomy of each use.
• Accountability: keep roles and decision boundaries understandable.
• Traceability: relate statements to relevant sources, records and evidence.
• Review: support corrections and reassessment as the context changes.
• Protection of people and data: consider privacy, security and material impacts.

The website may use AI to prepare library content. The process includes automated checks for structure and sensitive claims. Those checks do not, on their own, amount to specialist human review.

When assessing content, consider its sources and date. If you find an error or outdated information, send the page URL and your suggested correction to contato@vgrid.ai.

Website scenes, maps and visual records are illustrative demonstrations. Their movements and states do not represent monitoring of real companies, compliance opinions or decisions about people.

A visual indication of a control or evidence does not replace assessment of sufficiency, applicability and quality in an organization’s context.

ISO/IEC 42001 concerns AI management systems; ISO/IEC 23894 provides risk management guidance; the NIST AI RMF is voluntary; and the EU AI Act is a regulation whose application depends on legal scope.

Using a reference does not amount to certification or guarantee compliance. Organizational decisions require case-specific assessment and defined responsibilities.