Red Mountain
    AI Governance Strategy

    AI governance strategy that fits how your organisation works.

    The organisations getting this right treat governance as part of how they operate, built into everyday work and designed around the way your organisation runs. That is what we do. We combine strategy, service design, and technical delivery to help you meet the EU AI Act and use AI with confidence.

    Check your EU AI Act risk levelBook a governance conversation
    Why this matters

    Regulation is here, and it rewards the prepared

    The EU AI Act is the first major law governing how organisations use AI. Some duties already apply, including making sure your people understand how to use AI responsibly. Further obligations follow through 2026, 2027 and 2028, and they reach businesses of every size, from SMEs to global organisations.

    Yet just 14% of Irish organisations say they are fully prepared to comply, and 30% point to a lack of clarity about what the Act requires. The organisations that move early gain something beyond compliance: a clear view of how AI is used across the business, and the confidence to use more of it.

    Source: PwC Ireland responsible AI study, May 2026.

    Free EU AI Act risk check

    Where does your AI use sit?

    Five quick questions. Takes under a minute. You see your result straight away, with no email needed. If you want the full report, enter your email to download it. It is a starting point, not a compliance sign-off: a full governance review is where each system gets classified properly.

    Indicative guide reflecting the AI Act as amended by the 2026 simplification package. Not legal advice, and not a substitute for a full review of your own systems.

    Key dates

    When does the Act reach you?

    The Act applies in stages. Different duties take effect at different times, running through to 2030. These are the dates that tell you what you need to have in place, and by when. Underlined terms open a plain-English definition.

    1. 1 Aug 2024In force
      The Act enters into forceArt. 113

      Regulation (EU) 2024/1689 became law on this date. The duties themselves were phased in from 2025 onwards.

    2. 2 Feb 2025In force
      AI literacy in forceArt. 4

      already applies. Every organisation using AI must support the of its people.

    3. 2 Aug 2026In force
      General application + transparency dutiesArt. 50Art. 113

      The general application date for the Regulation, and the day the Article 50 duties began: must disclose they are AI, must be labelled. The rules are the exception, they remain deferred to 2027 and 2028.

    4. 2 Dec 2026Next up
      Content marking + new content banArt. 50(2)Digital Omnibus

      of AI-generated content. The ninth Article 5 prohibition applies: AI-generated non-consensual intimate imagery and . The first eight have applied since February 2025.

    5. 2 Aug 2027Upcoming
      National AI sandboxes operationalArt. 57

      Member States must ensure their competent authorities have at least one operational AI regulatory sandbox at national level. The deadline moved out a year, from 2 August 2026.

    6. 2 Dec 2027Upcoming
      High-risk (Annex III) obligations applyAnnex IIIArt. 113

      Recruitment, credit, essential services, education, law enforcement. Deferred under the 2026 .

    7. 2 Aug 2028Upcoming
      High-risk in regulated products (Annex I)Annex I

      AI inside medical devices, machinery and other CE-marked products. Sits alongside your existing .

    8. 2 Aug 2030Upcoming
      Public-sector high-risk systems in useArt. 111

      already running AI must be compliant by this date. large-scale IT components have until 31 December 2030.

    Changelog

    What has changed, and when

    We update this page and record it here, so you can see what is new since you last looked.

    Last updated · version 1.6

    Sources and references for every claim on this page

    Links open in a new tab. Where the Digital Omnibus package is cited, the link points to the Commission's policy page, since the amending act has no consolidated EUR-Lex text yet.

    How we work

    How we work

    01

    A clear picture

    We begin with an AI governance review. Together we map how AI is already used across your organisation and classify each tool against the EU AI Act, then identify the priorities that matter most for you. You get an objective starting point and a clear view of where you stand.

    02

    A working session

    We work through the findings with your team in a focused session. This is where the real thinking happens and where your leadership team aligns on what to prioritise. Many clients find this is where their wider AI strategy takes shape.

    03

    Governance built around you

    From there, you get the practical foundations the EU AI Act requires, ready to fit into how your organisation already governs itself: clear policies, an AI register, risk screening, and the evidence records that demonstrate compliance. Where deeper technical work is needed, we bring in our specialist partners, so both governance and delivery sit in expert hands.

    Outcomes

    What you walk away with

    Tangible outputs your team can act on the next day. Governance and evidence are built into the work from the start, so you leave ready to show auditors, boards, and regulators that you use AI responsibly.

    1. 01
      Written review of current AI use

      Every tool your organisation uses today, mapped in one place.

    2. 02
      Risk classification of every tool

      Each system placed against the Act's four tiers, with the reasoning.

    3. 03
      Gap analysis against your obligations

      Where you stand versus what the Act asks of you, ranked by exposure.

    4. 04
      Prioritised roadmap with owners

      The specific work to do first, sized for your team and your deadlines.

    5. 05
      Evidence pack for auditors and boards

      The records that show you are using AI responsibly, ready to share.

    Questions

    Commonly Asked Questions

    Start with a conversation

    The work begins with understanding where your organisation stands. Book an AI governance review for a clear picture, or talk to our team first and we will find the right starting point together.

    Book a governance conversationEmail us directly