The Governed AI Factory

The Governed
AI Factory
A Blueprint for Accountable Agentic AI in Regulated Enterprises
Siva Puvvada
PUBLISHING 2026

The ISO 42001 gap assessment template used in our engagements. Download it directly — no sign-up required.

Free download

ISO 42001 AI Governance Gap Assessment

The gap assessment tool used in every OvikAI ISO 42001 engagement — available here as a free download. Every clause and control in ISO 42001 — pre-populated with the three-layer framework mapping, EU AI Act cross-references, and a default recommendation for each gap.

What you get

The full gap assessment spreadsheet — six tabs, 59 controls, dashboard with auto-calculated readiness score

OvikAI Layer mapping — every clause and control mapped to Red Team & Assure, Register & Govern, or Operate & Monitor

EU AI Act cross-references — Articles 9, 12, and 72 mapped to the controls they satisfy

Pre-populated NC classifications and default recommendations — not a blank template

Download the template →

Free to use. No sign-up required.

Inside the book

What the framework covers

01

The three-layer assurance programme

Red Team & Assure, Register & Govern, and Operate & Monitor. What each layer produces, what the next layer depends on, and the evidence chain that runs from red team report to Technical File.

02

The Governed AI Factory

The runtime architecture — what actually runs at inference time, how governed decisions are processed, and how the monitoring loop feeds findings back to Layer 1. The components are described without vendor lock-in.

03

EU AI Act alignment

Articles 9, 12, and 72 mapped to the three layers. What the deployer must demonstrate, what the provider must supply, and how the evidence chain satisfies both.

04

Third-party AI governance

How to evaluate vendor AI products before adoption. The five-domain framework — risk classification, compliance posture, technical controls, contractual governance, and operational readiness.

05

Healthcare and life sciences

The Prior Authorisation agent as a reference implementation. How the three-layer programme applies to clinical AI — where the risks are real, the PII is everywhere, and the audit trail is legally required.

06

ISO 42001 implementation

How to use the gap assessment template in practice. Which clauses and controls the three-layer programme addresses, and how to build the evidence package for certification.

Want to apply this to your organisation?

A scoping conversation takes your current AI estate and maps it against the framework. You leave with the three highest-priority gaps and a clear starting point.

Book a scoping call →

Or email hello@ovikai.com directly.