You want AI. Compliance will have a stroke.

AI data governance consultancy for teams using AI on sensitive or regulated data. We design governance that ships: policy-as-code, access control, audit trails, and the guardrails that keep you compliant.

You want to use AI on customer data, financial records, or healthcare information. But compliance needs to know who accessed what, when, and why. Data governance becomes the blocker that stops AI projects from shipping.

We build AI data governance that actually works. Policy-as-code that enforces rules automatically. Access control that limits who can query what data. Audit trails that show exactly what happened. Guardrails that prevent problems before they become incidents.

The result is governance that enables AI, not blocks it. You get the speed of AI with the safety of proper controls.

Policy-as-code and automated governance enforcement

Governance that enforces rules automatically. Policy-as-code that prevents problems before they happen, not after.

Access control and permission systems

Access control that limits who can query what data. Permission systems that enforce boundaries and prevent unauthorised access.

Audit trails and compliance reporting

Audit trails that show exactly what happened. Compliance reporting that gives you the evidence you need when regulators ask.

Guardrails and safety checks for AI systems

Guardrails that prevent problems before they become incidents. Safety checks that catch issues before they reach production.

UK data sovereignty and GDPR compliance

UK-based infrastructure and suppliers. GDPR compliance built in, not bolted on. Data sovereignty that keeps your data where it should be.

Ready to discuss your needs?

Book a 30-minute call

Services offered

Things That is a product engineering practice focused on building AI systems that help people make sense of complexity. For over 20 years, we've worked with teams at Google, IBM, Air New Zealand, Kpler, EE, News UK, Tesco, and The Economist, sitting in the space between product strategy and hands-on engineering. When specialist help is needed, we work with a network of senior consultants and product designers.

We're not consultants who hand off to developers. We're product engineers and designers who think strategically about what users need, then build it, from architecture to APIs to interfaces to production deployment. Our work is hands-on, writing code, reviewing pull requests, designing schemas, and testing edge cases, but always with the human experience in mind.