NORMIXAI Compliance & Governance

TRUST CENTRE

Trust Centre

Practical governance starts with clear responsibilities, accurate information and transparent working practices. We provide AI governance and compliance support with an emphasis on practical controls, evidence and clearly defined engagement boundaries.

VERSION 1.0 · PUBLISHED

01

Our approach

Our 5A delivery approach — Align, Assess, Architect, Adopt and Assure — helps organisations connect AI use with business objectives, risk assessment, operational controls and ongoing review.

The approach is informed by ISO/IEC 42001. It is our delivery method, not an official ISO framework or a guarantee of conformity, certification or legal compliance.

    02

    Clear scope and accountability

    Before an engagement begins, we agree the scope, deliverables, responsibilities and relevant limitations.

    Clients retain responsibility for their business decisions, operational approvals and acceptance of residual risk. Where specialist legal, technical, clinical or other professional judgement is required, the relevant qualified specialists should be involved.

      03

      Professional credentials

      We describe qualifications and experience accurately and distinguish completed credentials from study or training in progress.

      Individual qualifications do not mean that our business or a client organisation holds ISO management-system certification. Any certification decision is made separately by the relevant certification body.

        04

        Confidentiality and information handling

        Please do not send confidential documents, sensitive personal information, passwords or access credentials in an initial enquiry.

        Where an engagement requires access to confidential information, we agree suitable handling and access arrangements before receiving it. We aim to request only the information needed for the agreed work.

        Details of website and enquiry-related information handling are set out in our Privacy Policy.

          05

          Website security

          We use HTTPS for website connections and restrict access to administrative and preview areas.

          These measures reduce risk but do not make any website or communication channel completely secure. Please report suspected security issues privately using the contact details below. Do not include passwords, personal records or exploit payloads in your initial message.

            06

            Responsible use of AI

            Client confidential information must not be entered into public generative AI tools as part of our work without an expressly agreed and appropriately assessed arrangement.

            AI-assisted work requires review appropriate to its purpose. The use of AI does not replace responsibility for checking facts, limitations and the suitability of an output.

              07

              Content integrity

              We distinguish original commentary, illustrative examples, client case studies and automated source summaries.

              We do not present fictional examples as client work or publish unsubstantiated claims about customers, partnerships, qualifications or results.

                08

                Questions or concerns

                For privacy, security, content accuracy or service-scope enquiries, email:

                [email protected]

                Please use a subject line that identifies the nature of your enquiry.

                  READ THE DETAILS

                  Our policies, in plain view.

                  Read our policies and service boundaries.

                  COMMON QUESTIONS

                  Clear from the outset.

                  Where should we start?

                  Start with a simple picture of where AI is being used, what information is involved and who reviews the outputs. An initial email can help identify an appropriate scope for a discussion.

                  Is this legal advice or certification?

                  No. Governance and compliance support does not replace advice from a qualified lawyer or other relevant specialist, and it is not a certification or guarantee of compliance.

                  Do we need a particular AI tool?

                  The focus is on your organisation’s use of AI and the controls around it. Any tool-specific work or implementation requirements would need to be agreed separately.

                  What should I include in my first email?

                  Your organisation, industry, current or planned AI use, main questions and preferred timeframe. Please leave out confidential documents and sensitive personal information.

                  LET’S TALK

                  Start with a practical conversation

                  Tell us about your organisation, how you use AI, your main concern and any relevant timeframe. We can discuss a suitable starting point and scope.

                  Email Us