← Back to insights Governance

What responsible AI looks like in practice

Responsible AI is less about principles on a wall and more about who answers when something goes wrong.

Insight · Governance · Rubytech

Almost every organisation now has a statement of AI principles. Far fewer can tell you, for a given system, who owns it and what they would do if it failed. That gap, between the value on the wall and the answer in the room, is where responsible AI actually lives.

Four plain questions

You do not need a framework to test whether an AI system is being run responsibly. You need four questions, and you need real answers to them. Who owns this system? What data trained it? Can we explain a decision to the person it affected? Can we show our working to a regulator? If those answers are clear, most of the harder governance follows naturally. If they are vague, no amount of policy language will save you.

Notice that none of those questions is about the model itself. They are about accountability. The technology can be excellent and the governance can still be missing, because governance is a property of how people are organised around the system, not of the system alone.

Ownership is the keystone

When something goes wrong with an AI system, the first problem is rarely the error. It is the silence that follows, the minutes or days spent working out whose job it was to notice. Naming a clear owner for each system removes that silence. The owner does not have to be technical. They have to be the person who is accountable for the outcome, who can pause the system, and who can speak for it when questions come.

Clear ownership and good records are not a brake on progress. They are what let you scale AI with confidence instead of crossing your fingers.

Records turn claims into evidence

The difference between believing your AI is fair and being able to show it is a record. A short, honest log, of what the system does, what it was trained on, when it changed, and what happened when it was wrong, converts a claim into evidence. That same record is what lets you explain a single decision months later, to a customer, an auditor, or a court. Organisations that keep these records as a matter of routine find oversight cheap. Those that try to reconstruct them after an incident find it almost impossible.

Why this speeds you up

It is tempting to read all of this as friction, a tax on moving fast. The opposite is true for any system you intend to scale. The reason responsible practice feels slow is usually that it is being done late, under pressure, as a retrofit. Built in from the first project, it is light: an owner, a record, a way for a person to step in. Those habits are exactly what let you put the next system into production without a fresh argument about whether it is safe. Confidence, not caution, is the real product of doing this well.

If you can name the owner and find the records for every AI system you run, you are further along than most. If you cannot, that is the place to start, and it is work we do every week.

Start a conversation More insights