Who’s controlling your AI?
AI is already in your business. The question is, who’s steering it?
Somewhere in your business today, someone is pasting a client list into an AI chatbot to tidy up the formatting. They’re not being reckless. They’re just busy.
But multiply that by every team, every week, and you’ve got a picture most leaders can’t see. AI rarely arrives through a board decision. It arrives through a browser tab.
The productivity gains are real. So are the questions:
- Which AI tools are your people actually using?
- Where does your data go once it’s typed into a prompt?
- What’s it all costing you?
- Who’s in charge of making sure it goes well?
You can’t steer what you can’t see
Most of the AI problems we see share the same root cause. It isn’t the tools. It’s a lack of visibility.
55% of employees admit to using AI tools that haven’t been approved
86% of businesses have had at least one AI-related incident in the past year
17% of organisations have governance built into their AI by design
And the cost isn’t only risk. Businesses with high AI tool sprawl see 17% lower productivity, 22% lower revenue and 19% lower operating profit than those in control of their AI estate.
Ownership changes everything
When leaders take clear accountability for AI outcomes, 57% say AI delivers meaningful business value. Without that accountability, it’s just 21%.
Your AI owner doesn’t need to be technical. They need the authority to make decisions, the time to follow through and the backing of the leadership team.
Taking control doesn’t mean slamming on the brakes
You don’t need to ban the tools your team relies on, or start a six-month transformation programme. Taking control simply means:
Finding out what’s really going on.
Deciding what you want to happen.
Putting someone in charge of making sure it does.
With that baseline in place, the boardroom conversation changes from “Should we be doing something with AI?” to “Which of these opportunities do we go after first?”
Where does your business sit?
Every business sits somewhere on the AI maturity curve. It’s got nothing to do with your size, sector or budget. It’s about how well you understand and govern the way AI is used.
| Level | Where you are | What to focus on |
|---|---|---|
| Level 1: Aware | You know AI matters and suspect your people are using it. But there’s no policy, no owner and no clear picture. | Get your house in order: find out which tools every team uses, what they cost, and sort the risks into now, next and later. |
| Level 2: Adopting | AI is part of how work gets done. There may be guidance, but it isn’t consistently followed. | Embed AI properly: move everyone to company-controlled accounts, agree what data never goes into a prompt, and put one named person in charge. |
| Level 3: Established | Policies and ownership are in place. The challenge is keeping it that way as tools, people and regulation change. | Keep it sustainable: review what’s working every quarter, watch the edges, and verify, don’t just forward. |
Our guide covers each level in depth, with practical steps and an 18-point checklist to see how far you’ve come and what’s next.
When it comes to AI, the danger is rarely in the tool itself. It’s not knowing the tool is being used at all.
AI Reality Check
Not sure where you stand?
Take the True9 AI Reality Check. Answer 12 quick questions and get an instant Control Score out of 100, with practical next steps. It’s free, and you don’t need to sign up to see your score.
Question 1 of 12
Sources:
55% unapproved AI use: Security Journal UK
17% governance by design, 86% AI incidents: OneTrust 2026 AI-Ready Governance Report
Tool sprawl impact (17% / 22% / 19%): IBM
Ownership 57% vs 21%: KPMG Global AI Pulse Q2 2026