Decide and assign
Without a written structure, AI decisions end up with no owner and no trail.
GOB-1 formalises who governs AI in your organisation: what roles are involved, how often they meet and how decisions are made. GOB-2 turns that structure into specific activities using the RACI model, so that no task is left to “the team in general”.
Setting up a committee is not a requirement of Regulation (EU) 2024/1689: in Alethexis it is an internal methodological control that your organisation chooses to adopt. Nor is the AI Officer a legal post; it is an internal governance role.
Who is responsible, who approves, who is consulted and who is informed of each AI decision.
Assign, from among your organisation's members, the AI Officer and the management representative and, where relevant, the DPO, a technical lead and a business owner. If someone is missing, you can invite them from the section itself.
If at least one active system processes personal data, or M3 is active, the constitution cannot be recorded without a DPO assigned. It is an internal criterion of the Alethexis method; it does not replace the analysis of whether your organisation must designate a DPO.
The platform suggests a quorum based on your organisation's size and quarterly meetings; both can be edited. The Charter is drafted from a template covering purpose, decision scope, composition, functions, cadence, quorum, management of decisions and minutes, and review. Recording its approval falls to the Owner.
GOB-2 loads standard governance activities with suggested Responsible, Accountable, Consulted and Informed roles. You can change each assignment, add activities specific to your sector and remove those that do not apply.
Each activity has at least one Responsible and exactly one Accountable, and the matrix is not generated until all of them do. If the same role is both R and A, the screen flags it.
AI Committee Charter, as a PDF with a hash
Cover page with your company name, version and date; purpose and scope; composition in a table with post, name and email; functions; cadence and quorum; management of decisions and minutes; and review. Next to the composition, a note that the AI Officer is an internal methodological role. It ends with the Owner's recorded approval.
RACI matrix, as a PDF with a hash
The activities with their R, A, C and I roles. Each generation is a new version; the platform records the SHA-256 integrity hash of the file and adds it to the organisation's evidence.
The controls in the Alethexis catalogue that this feature helps to document, with their legal basis where they have one, and their nature.
Document the Committee's minimum quorum (Alethexis proposes three quarters of full or alternate members), the majority required for each type of decision (ordinary or qualified) and the rules for a tie. Without clear rules, contested decisions bring the Committee to a standstill.
Legal basis
No direct basis in law.
Build a complete RACI matrix for the AI programme's processes: classification, FRIA, DPIA, AI literacy, incidents, evidence, human oversight and change management. It is the operational tool that removes ambiguity about who is responsible for what.
Legal basis
No direct basis in law.
Keep every historical version of the RACI with a timestamp. This makes it possible to reconstruct who was responsible for what on a past date, which is critical information in a post-incident investigation.
Legal basis
No direct basis in law.
Data from the controls catalogue. The labels show the regulatory nature of each control; they are not a statement of compliance.