AI governance and test assurance for UK organisationsMake your AI safe to ship.

Independent AI governance, AI risk assessment and AI testing. We bring 22 years of experience setting up the controls, quality gates and sign-offs that let banks and regulated businesses release technology with confidence, and we apply the same discipline to AI.

Every AI system should pass a gate like this before real customers, staff or data depend on it.

Assurance experience gained with
  • TSB Bank
  • LCH.Clearnet
  • UK Ministry of Justice
  • RBS
  • Barclaycard
  • Legal & General
  • Allianz
  • Vocalink
  • BUPA
  • BP

AI governance & test assurance

Know what AI you're running, what could go wrong, and who signed it off.

Most organisations are already using AI, through staff tools, vendor software and their own pilots, usually without an inventory, a risk assessment or a clear owner. We help you put proportionate controls in place and test AI properly before it goes live, so you can adopt it without surprises from customers, auditors or regulators.

AI health check

A fixed-scope review of where AI is used across your organisation, including tools staff have adopted on their own. You get a rated risk picture and a short, prioritised action plan.

Good first step forSMEs and teams starting their AI journey

AI policy and AI register

A practical AI use policy your staff will actually follow, and an AI register that tracks each system's owner, risks, controls and review dates, run the way a good risk log should be.

Good forOrganisations with no AI governance yet

Supplier AI assurance

Much of your AI arrives inside products you buy. We review vendors' AI claims, evidence and contracts, and ask the questions your procurement process doesn't yet cover.

Good forFirms relying on third-party and embedded AI

AI testing and release gates

Testing for accuracy, consistency, failure modes and misuse, with clear go/no-go criteria and a documented sign-off before launch. This is non-functional test assurance applied to AI.

Good forTeams building or deploying AI into live services

EU AI Act and ISO 42001 readiness

Gap reviews against the EU AI Act, ISO/IEC 42001 and the NIST AI Risk Management Framework, scaled to your size and risk, with a realistic roadmap rather than a shelf document.

Good forRegulated firms and UK businesses serving EU customers

How an engagement runs

  1. Discovery callA free 30-minute conversation about what you use, what worries you and what you need to show.
  2. ReviewWe look at your AI use, documents, suppliers and existing controls, with minimal disruption to your team.
  3. Findings and roadmapA clear written report: rated risks, quick wins and the controls worth investing in.
  4. Ongoing assuranceOptional periodic reviews, release gates for new AI, and support when auditors or clients ask questions.

Grounded in responsible AI principles of fairness, transparency and accountability, UK GDPR, and recognised frameworks including the EU AI Act, ISO/IEC 42001 and the NIST AI RMF.

AI recruitment

Specialist AI recruitment for AI and data roles.

Hiring for AI is hard when you're not sure which role you need or how to judge candidates. We help you define the role, then introduce candidates who have been technically screened before their CV reaches you.

  • ML engineers
  • Data scientists
  • LLM and GenAI engineers
  • MLOps engineers
  • Data engineers
  • AI governance and risk
  • AI test and assurance
Discuss a role
  • Role definition firstClarity on whether you need an engineer, a scientist or a governance lead before you spend money searching.
  • Technically screened shortlistsCandidates are assessed on real project work, with a written summary alongside every CV.
  • Permanent placements, success-based feesYou pay only when your new hire starts, backed by a replacement guarantee.
  • Free for candidatesCandidates are never charged, and CVs are only shared with an employer with your agreement.

Questions

Frequently asked questions

What is AI governance?

AI governance is the set of policies, roles, controls and checks an organisation uses to make sure its AI systems are safe, fair, lawful and accountable. In practice it means knowing which AI you use, assessing its risks, deciding who owns it, and keeping evidence that it was tested and approved.

Does the EU AI Act apply to UK businesses?

It can. The EU AI Act can apply to UK organisations that place AI systems on the EU market, or whose AI outputs are used in the EU, even though the UK is not in the EU. Its obligations are being phased in, so it is worth checking your exposure early.

What is AI test assurance?

AI test assurance is independent checking that an AI system works as intended before and after it goes live. It covers accuracy, consistency, failure modes and misuse, and ends with clear go/no-go criteria and a documented sign-off.

Do we need AI governance if we only use tools like ChatGPT or Copilot?

Yes, in a proportionate way. Staff use of AI tools can expose confidential or personal data and produce errors that reach customers. A short AI use policy, an AI register and basic controls usually cover the main risks.

Which AI roles do you recruit for?

We recruit for permanent AI and data roles, including ML engineers, data scientists, LLM and GenAI engineers, MLOps engineers, data engineers, and AI governance, risk, test and assurance specialists.

Do candidates pay a fee?

No. Candidates are never charged for finding work, and we only share a candidate's details with an employer after they have agreed.

About us

Assurance experience, applied to AI.

VWIN brings over 22 years of IT assurance experience across banking, financial services, trading, insurance, healthcare, legal, defence and the public sector.

We set up and led the non-functional test assurance function at TSB Bank, defining the controls, quality-gate criteria and sign-off processes that reduced production incidents, and reporting to senior management up to CTO level. We have also managed assurance of large external suppliers, reviewing their deliverables, evidence and costs against scope.

AI needs exactly that discipline. We combine AI governance training with hands-on technical delivery experience, so the advice you get is grounded in both regulation and real delivery.

Start with a 30-minute conversation.

Tell us what AI you're using or planning, or the AI role you need to fill. There's no charge and no obligation, and you'll leave with at least one practical next step.