“I want to try. Am I allowed to?”
- Rules scattered across several documents.
- Uncertainty about which data and tools can be used.
- No clear person to ask.
Clear rules, useful resources and the right support. Build your first AI governance framework together, then test it in a living mindBrain model.
In the approved environment, with the intended data. The result remains a draft to review.
Local illustration, with no connection to mindBrain.
Know what to do, how to do it and who to ask for help.
Your scenarios compared with expected outcomes, not a vague promise.
A first scope, deliverables at every step and an agreed schedule.
You describe and decide. We facilitate and formalize the model.
The same governance should help people who use AI, oversee the work and maintain the rules.
Illustrative before / after: the target state concerns the scope being worked on. These are not measured client results.
Cards, sticky notes and real situations. Five acts in business language reveal use cases, rules and resources.
Our starting point: a customer service employee wants to draft a reply to a complaint with AI, using the CRM and an ERP order. What can they use, do and have approved?
We describe a real situation before writing a rule. The cards reveal the people, documents, data and systems involved.
We follow what people actually do. Reading, sharing, drafting a reply and sending it are different actions and may require different controls.
We qualify information, environments and decisions. A proposed use is not an approved use. Unclassified data is not public data.
We turn intuitions into explicit conditions. Event cards reveal exceptions: sensitive data, missing approval or a changed contract.
We formulate the questions employees, managers and agents will need to answer. The framework becomes searchable from their situation.
Employees bring the situations. Competent people approve what falls within their mandate. Unknowns remain visible: they never become default permissions.
We select the domains needed for the chosen process. There is no need to model the whole company to begin.
We distinguish the source, its interpretation, its applicability and the operational rule adopted. Uncertain points remain visible.
“Which obligations have been identified for this use?”
Legal interpretations and approvals remain the responsibility of competent people. An internal rule cannot override a legal obligation.
Security, publishing, purchasing and retention rules are connected to concrete tasks and decisions. One procedure can govern several teams.
“What should I check before sharing this document?”
The source, version, owner and review date are kept. Modeling a control does not mean it is already enforced in a tool.
We connect roles and responsibilities to useful resources: guides, approved examples, learning paths and people who can help.
“Which method can I follow, and who can help me?”
A learning need becomes a support path. Approval depends on the chosen mandate, not only on a job title.
We describe the purpose, environment, configuration, data categories and flows. The agent’s level of autonomy is handled explicitly.
« Is this environment appropriate for this task and data? »
Access rights, information freshness and unevaluated points are part of the model. Production connections are defined separately.
We connect rules to the objects that move through the process: a customer file, an order, an invoice, a role or training. Existing applications remain in place.
« What can the agent do with this file, and under which mandate? »
We model the objects useful to the chosen case, not the whole application estate. A relation in the model is not an API connection already deployed.
They become a living model in mindBrain: connected ontologies, explicit rules and business questions that can be tested.
The journey below illustrates the method. Synthetic data and a local demonstration engine.
Objects, properties and links help retrieve the rules relevant to a situation. Click an element to explore its place in the model.
A purpose, data, an environment and an action. This use connects the domains without conflating them.
Associated question: “Can I draft this reply in this situation?”
The semantic model: what exists and how it is qualified.
The graph and links between domains: rules, relations and conditions.
Projections: useful views for people and agents, without inventing information.
The same tool does not give the same answer in every situation. Change the settings or choose a starting case.
In this example, internal data can be used in the approved environment. The outcome remains a draft to review, with no automatic sending.
Educational illustration calculated in your browser. No connection to mindBrain, no AI call, no real-data processing and no external action.
F-R01Internal or confidential data is not allowed in an unapproved personal account.F-R02An unknown data category or assessment requires review. A personal tool still needs assessment, even for public data.F-R03The environment must be approved for the example scope.F-R04Drafting a reply requires review before any external use.F-R05An external send requires approval by the authorized person.These rules only illustrate the method. They are neither a policy recommended for every company nor a legal decision.
The outcome, its justification, its limits and accessible support. Choose a question to see a possible answer.
For this fictional file classified as internal, prepare only a draft in the approved environment. The external reply must follow the required approval.
Missing data or assessment: the answer would become “requires review”.
Prewritten examples based on the fictional model. In the workshop, questions and expected answers are defined with the scope owners.
A positive answer is not always the right outcome. A model must also refuse, request approval or acknowledge missing information.
| Fictional situation | Expected decision | Actual result |
|---|---|---|
| Draft / approved framework | Allowed with conditions | To test |
| Confidential data / personal account | Not allowed | To test |
| Unknown data category | Requires review | To test |
| Sending / approval missing | Approval required | To test |
| Sending / approval present | Allowed in this example | To test |
| Environment not assessed | Requires review | To test |
Compare answers, justifications and support guidance with the approved expectations.
Document gaps, coverage, sources and missing approvals.
Track response times, requests for help and uncovered cases, using the data available.
The score compares only the decisions for these six synthetic cases. It measures neither your compliance, production effectiveness nor any real time saving.
Living does not mean all-knowing. New information must be added, its effects identified and changes approved before publication.
The assessment of the new environment is missing. Dependent uses must be reviewed.
It is provided by an owner or received from an integrated source.
Draft preparation, sending approvals and related resources.
The missing assessment must be provided and reviewed before a decision is made.
The revised version and its resources become available within the chosen scope.
The button simulates adding missing information and approval. It does not approve any real tool. A policy change is separate from executing controls in applications.
Modeling ≠ enforcing a technical control. Application permissions, connections and blocking mechanisms require a defined and tested deployment.
A living model has owners. Its sources, versions, approvals and access rights must be maintained. It cannot know about changes that are not added to it.
A format spread across collective work, formalization and validation. Each step builds on what came before.
We choose a first cross-functional process and the situations that need a clear answer.
Your examples, questions and existing documents.
Facilitating the story, first Names and Verbs, and identifying states and areas of doubt.
A shared scope, a map of uses and the first business questions.
The five acts are completed with edge cases, responsibilities and resources.
Business decisions and the people competent to provide the required approvals.
Event card exercises, condition drafting, case classification and support paths.
Proposed or approved rules, their owners and points still requiring review.
Captured elements become a semantic model, relationships and business-oriented views.
Your review of the vocabulary and links. You do not code the model.
Ontology formalization, cross-domain links and preparation of synthetic test instances.
A first model of the chosen scope, with questions and rules to test.
We compare the model with expected answers, including cases where it should refuse to conclude.
Scope owners to check results and remaining open decisions.
Scenario testing, gap analysis, agreed corrections and maintenance definition.
The revised model, test results, support kit and list of next steps.
A shared vocabulary, decisions made and points that remain open.
Rules, questions and links in mindBrain for the agreed scope.
Useful resources, the support path and update responsibilities.
The five acts describe the capture method; the four half-days describe the service. The proposed schedule and participant involvement are adjusted during scoping.
Three mini-tutorials to move from a governance intention to a first practical exercise.
Have people describe the work and identify the first areas of doubt.
Connect a condition to a resource, an owner and an answer.
Put the model against exceptions and missing information.
Build governance they can understand, question and use to move forward.
Workshops + mindBrain model + tests
From
for 4 half-days of work
We define the scope, participants and scenarios to test before confirming the proposal.
You bring your situations and decisions. We guide the workshop and build the model.
The starting price covers an agreed first scope. Complexity, exact deliverables, timing and tax conditions are specified in the proposal.
Hosting, possible licences, application integrations and maintenance: conditions to be specified in the proposal. The workshop is neither a certification, a full audit nor a compliance guarantee.
An explicit collaboration framework from the start.
No. We can start from business situations and available documents. If a policy exists, it becomes a source to connect to uses, rules and questions. It is not replaced by default.
A scope owner, employees who know the work and the functions needed for decisions: business, IT, security, data protection or legal, depending on the case. Experts contribute on matters within their mandate.
No. You describe your work in natural language, examine situations and approve decisions. We handle formalization. Your business involvement and decisions remain essential.
No. The workshop builds and tests a first framework on an agreed scope. Legal interpretations must be approved by competent people. Uncovered topics and missing approvals are identified.
Useful objects can be represented and connected during modeling. A production integration is separate work: access, synchronization, security, controls and operations must be defined. They are not activated by this demonstration page.
Before testing, we define the decisions and expected answers for the scope scenarios. We then compare results, justifications and guidance to the right support. Gaps and limits are documented. Real-world effectiveness is assessed after activation using agreed indicators and observed data.
The handover specifies who maintains the model, which sources must be reviewed and which actions remain. Expansion to other scopes, integrations and ongoing support are defined separately. Four half-days do not represent a guaranteed calendar deadline.