PolyGovern

PolyGovern is an AI governance advisory firm working with regulated and public-sector organisations in Australia, with practices in Sydney and Melbourne. Clients include banks, insurers, superannuation trustees, healthcare providers, technology and SaaS providers, and government agencies.

The firm works to the instruments Australian boards and regulators ask about: APRA CPS 230, ASIC REP 798, the Privacy Act 1988 and OAIC guidance, ISO/IEC 42001, the EU AI Act, the NIST AI Risk Management Framework and the Voluntary AI Safety Standard.

Services are grouped into three tracks. Governance and strategy covers AI governance consulting, AI strategy, AI policy development, risk framework development, board-level AI governance and model governance. Assessment and assurance covers AI audit and assessment, AI risk and impact assessments, ISO 42001 gap analysis and certification support, AI ethics implementation and third-party AI risk. Compliance and advisory covers regulatory compliance, EU AI Act compliance, healthcare AI governance, ongoing advisory support, AI literacy training and leadership training.

Engagements typically run six to twelve weeks and close with documented artefacts such as a classified AI register, mapped controls, board-ready policy documents and an audit-ready evidence pack.

PolyGovern also offers a free AI risk calculator, with no login, that classifies AI systems against the EU AI Act, ISO 42001, NIST AI RMF and Australian frameworks.