AI governance training teaches your team how to use AI tools safely at work: what's allowed, what data never goes into a prompt, which tools are approved and how to check AI output before it reaches a customer. I'm Lilach Bullock, an AI implementation consultant and trainer, and I run these sessions for teams around their own work, online or in person, so the policy turns into everyday habits.
Most companies I talk to already have one of two things. Either a policy that nobody's read, or staff using ChatGPT, Claude, Copilot and Gemini with no policy at all. Neither is governance. Governance is when your people know the rules well enough to follow them on a busy Tuesday.
What the training covers
I build each session around four areas. They're the ones that cause real problems when they're missing.
| Area | The question your team should be able to answer |
|---|---|
| Acceptable use | Which tasks is AI fine for here, and which ones need a human to do it from scratch? |
| Data handling | What can I paste into a prompt, and what must never leave our systems? |
| Tool approval | Which AI tools are approved, who decides, and what do I do if I want to try a new one? |
| Review of AI output | Who checks AI-drafted work, what are they checking for, and when does it need a second pair of eyes? |
We use real examples from your own work, not generic slides. A support team's risks look nothing like a marketing team's, and a session that ignores that won't stick.
Policy first, or training first?
Ideally both, in that order, but I meet teams at either end. If you already have a written AI policy, I'll turn it into a practical session with examples your people recognise. If you don't, we can draft the working rules together in the session itself, and your legal or compliance lead signs off the final wording. I'm a trainer and implementer, not a lawyer, and I'll always say so.
This is different from basic AI literacy. If your team first needs to understand what these tools are and how they work, start with AI literacy training. If you're dealing with regulation and formal obligations, my notes on AI compliance are the better read. Governance training sits between the two: people already use AI, and now they need clear rules they'll follow.
Who it's for
- HR and people leads who need a team-wide AI use policy that people understand.
- Operations and compliance leads who've noticed AI tools spreading faster than the rules.
- SaaS marketing teams handling customer data, drafts and campaigns with AI every day.
- Small businesses that want a short, clear set of rules before something goes wrong.
How a governance session runs
- A short call to understand your tools, your data and any policy you already have.
- I look at the real tasks your team uses AI for, so examples come from your work.
- The session itself: the four areas above, worked through on your own scenarios, with time for the awkward questions people don't ask in emails.
- A one-page summary of the rules agreed, written so people will read it.
- Optional follow-up for teams who want help putting checks into their workflows.
Sessions run online or in person. I don't publish prices, because the scope depends on team size and how much policy work you need.
Who I've worked with
My AI work this year has been with SaaS marketing teams, a product marketing team that wanted a practical Claude workshop, a telecom company that asked for AI enablement, and small businesses automating manual work. In every case, the same question came up early: what are we allowed to put into these tools? That's why governance is built into all my training, not bolted on.
I've spent 23 years in marketing, spoken at over 100 events including TEDxBolton, and been quoted in Forbes, Entrepreneur.com, HuffPost and Smart Insights. If you'd like more on how I work with companies, see hiring me as an AI consultant.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
What to look for when hiring an AI governance trainer
- They ask what tools your team already uses before they plan anything.
- They use your scenarios, not a generic deck that could be for any company.
- They're clear about where training ends and legal advice begins.
- They leave you with rules short enough that people will remember them.
- They can help you build checks into workflows, not just talk about them.
Clear rules make teams braver with AI, not slower. I run AI training and workshops for teams, and help businesses with AI enablement and workflow automation, so the busywork runs itself and people get time back. Most of that work is with SaaS marketing teams and small businesses. Here's how we can work together.
Frequently asked questions
What should an AI policy for employees include?
At minimum: which tasks AI is fine for, what data must never go into a prompt, which tools are approved and how new ones get approved, and who checks AI output before it reaches customers. Keep it short enough to remember.
Who provides AI governance training for small teams?
I do. I run AI governance sessions for teams built around their own tools and tasks, online or in person, and leave them with a short set of rules they'll follow.
Is AI governance training the same as AI literacy training?
No. Literacy training explains what AI tools are and how they work. Governance training is for teams already using them who need clear rules on use, data, approval and review.
Do we need a written AI policy before the training?
No. If you have one, I turn it into practical examples. If you don't, we draft the working rules in the session and your legal or compliance lead signs off the final wording.
Can AI governance training be done online?
Yes. I run sessions online or in person. The content is built around your team's own work either way.
How do we stop staff pasting sensitive data into ChatGPT?
Make the rule simple, give examples from their own work, approve tools that fit your data needs, and train people on it. Rules people understand get followed far more than rules they've only been sent.
