Governance assurance is not built on opinions. It is built on evidence. The NJ4AI assessment framework evaluates governance through documented controls, observable evidence, accountability structures, and framework alignment — to produce a consistent, defensible view of governance readiness.
The score summarises the evidence. The score is not the evidence.
Who owns AI governance — and who answers for it.
Named roles, mandates, and decision rights.
The written rules that govern AI use and data.
The mechanisms that put policy into practice.
The proof that controls actually operate.
Due diligence and assurance over third parties.
How issues are detected and reviewed over time.
Whether it would hold up under inspection.
An assessment is only as defensible as what sits beneath it. These are the kinds of artefacts the assessment draws on — the things a buyer, auditor, or regulator can actually inspect.
AI-use policy, data-handling policy, acceptable-use.
AI-system inventory, risk register, processing records.
Sign-offs for high-impact systems and changes.
Staff awareness and role-specific training logs.
Completed third-party AI due-diligence.
Logs, reports, and trails an auditor can review.
We assess how strong the evidence is, how well controls are documented, and how that maps to the frameworks that apply to you. Evidence leads. A control that is documented but not evidenced counts for materially less than one backed by proof. The detailed weighting is proprietary; the principle is not.
One assessment logic
Many frameworks.
One artefact
Many obligations.
Your evidence is assessed once, through one consistent logic — then mapped to every framework that applies. The same artefact answers many obligations at once. See the frameworks we map to →
The assessment is not fully automated. Human review remains part of assurance.
Tooling brings consistency and scale; a qualified reviewer validates the findings, weighs the evidence, and stands behind the conclusion. That is what regulators, procurement teams, and compliance functions expect — and it is what makes the result defensible.
The score is the output. Evidence is the foundation.
Tell us what you're preparing for. We scope the assessment to your in-scope systems and the frameworks that apply, and respond within two working days.
See a full sample Governance Assurance Report →
Prefer email? info@notjust4.ai