Skip to main content

Editable governance records

ACT: AI Controls Toolkit

Turn AI governance questions into documented decisions and next actions.

Use ACT to coordinate one AI deployment review: scope the use case, assign owners, collect supplier and technical evidence, and record the decision. The governance lead assembles the records; managers and directors review the conditions, unresolved risks and next actions. Your team performs the tests and makes the decisions.

11 core files. 6 Word documents, 4 Excel workbooks and 1 PowerPoint deck.

ACT costs ₹99,000, inclusive of applicable GST. This is a one-time purchase in INR, with no recurring subscription.

ACT is a digital download. A download link is sent by email within one business day after successful payment.

Refund requests may be made within 30 calendar days after successful payment. See the refund and cancellation policy and delivery details.

The ACT licence covers one organisation: nonexclusive, nontransferable internal use. Resale, redistribution and consultant reuse across customers require a separate written agreement. The Implementation Sprint is separately scoped and priced; it is not included in ACT. See the terms of purchase.

The problems ACT helps you address

  • An AI initiative has sponsors and technical owners, but no clear decision owner.
  • An agent can call tools or act on business records, but its permitted authority is poorly documented.
  • Supplier assurances do not answer questions about the application, model provider, subprocessors and data handling.
  • Incident procedures describe a stop control without evidence that work actually stops downstream.
  • Management needs a concise explanation of decisions, unresolved risks and required actions.

What is included

Eleven core files across eight workflow areas. Asset numbers identify files within the toolkit.

Asset 01 · Word document

AI initiative intake and risk ownership

Owner: Business owner

Next action: Scope one use case and name the accountable executive.

Asset 02 · Excel workbook

Agent authority and tool boundaries

Owner: Platform owner

Next action: Record identities, action limits, ownership and observed containment tests.

Asset 03A · Excel workbook

MCP and skill sandbox gate

Owner: Technical owner

Next action: Document the server, capabilities and test evidence.

Asset 03B · Word document

MCP sandbox review and decision

Owner: AppSec reviewer

Next action: Record the permitted scope, restrictions and next review.

Asset 04A · Excel workbook

AI vendor and subprocessor review

Owner: Procurement owner

Next action: Collect supplier evidence and route open issues.

Asset 04B · Word document

AI supplier contract rider and negotiation record

Owner: Legal and procurement

Next action: Adapt the clauses and record agreed terms and unresolved issues.

Asset 05 · Excel workbook

Post-deployment drift and human review

Owner: Process owner

Next action: Record reviewed samples, overrides and cohort decisions.

Asset 06 · Word document

Agent incident containment and recovery runbook

Owner: Incident commander

Next action: Test the scoped stop procedure, downstream effects and restart conditions.

Asset 07 · Word document

Executive risk appetite and exception record

Owner: Accountable executive

Next action: Record a scoped decision, conditions, expiry and action owner.

Asset 08A · PowerPoint deck

Board AI oversight deck

Owner: Executive sponsor

Next action: Present the decision, evidence, uncertainty and follow-up.

Asset 08B · Word document

Board and audit committee AI briefing

Owner: Executive sponsor

Next action: Provide the supporting written decision and action record.

How to use ACT

Start with one deployment and one accountable executive. Complete the intake, gather the relevant technical and supplier evidence, record the authorized scope and assign follow-up actions. Use the monitoring and incident records during operation. Bring material changes, exceptions and decisions into the executive briefing.

Every asset identifies a practical next action. Worked examples demonstrate the process using fictional data. Live records remain separate from those examples.

For managers, executives and boards

The intake, risk-appetite record, exception record, board deck and written briefing help non-technical leaders ask specific questions: What changed? Who authorized the scope? What evidence supports the decision? What happens if a control fails? Who must act next?

Format and fit

ACT consists of editable Word, Excel and PowerPoint files. Your team operates the records and reconciles them using shared identifiers. It supports internal evidence collection and decision-making. It does not automatically connect to cloud accounts, enforce controls or certify compliance.

The toolkit is for teams coordinating a scoped deployment review. If your immediate need is automated monitoring, cloud configuration or workflow integration, assess that separately from these editable records.

Implementation support is a separately scoped service.

Frequently asked questions

Is ACT one product?

Yes. ACT is one AI Controls Toolkit containing eleven core files across eight workflow areas.

Can non-technical leaders use it?

Yes. The intake, executive decision records and board materials are designed for leadership review. Technical, procurement and legal owners contribute the supporting evidence.

Does it cover agentic AI and MCP?

It includes editable records for agent identities, tool boundaries, MCP server and skill reviews, human oversight and incident containment. Your technical team must test the actual implementation.

Does it integrate with AWS, Azure or Google Cloud?

The toolkit includes cloud evidence prompts. It does not install controls or connect to a cloud account. Evidence must reflect the services and configuration used by your organization.

Does completion prove compliance or approve deployment?

No. The records support a scoped review. Authorized people make deployment decisions, and legal or regulatory applicability requires context-specific assessment.

How do we obtain ACT?

Review the ACT checkout summary for the current purchase route and policies. ACT costs ₹99,000, inclusive of applicable GST. This is a one-time purchase in INR, with no recurring subscription. ACT is a digital download. A download link is sent by email within one business day after successful payment. Refund requests may be made within 30 calendar days after successful payment.

Related free resource

Use the Cloud AI Control-to-Evidence Mapper to identify evidence and follow-up actions for a selected cloud deployment.

Last reviewed: . Source basis: Move78 ACT product scope, eleven-file inventory and owner-approved purchase terms of 17 October 2026. Toolkit records support human review; they do not establish compliance or approve deployment.