AI adoption has soared among UK enterprises, with a significant 93% of organisations utilizing the technology in one form or another. However, the lack of governance frameworks is startling, with only 7% having fully embedded systems to manage AI-related risks, as highlighted by Trustmarque’s AI Governance Index 2025.
Governance frameworks are crucial to ensure the transparency, fairness, and compliance of AI technologies. As AI permeates crucial business processes, robust governance must be integrated from the design phase through deployment. By preventing bias, safeguarding data, and adhering to compliance requirements, mature governance is a cornerstone for building trust and fostering long-term AI success.
Trustmarque, a reputable technology reseller, has released a report following a survey of 507 senior UK IT decision-makers. The report highlights a widening gap between the rapid adoption of AI and the development of mature governance structures.
Key Insights Include:
The research indicates that many organisations are still reliant on outdated software development processes that inadequately address AI-specific risks like model bias or interpretability gaps. Just 28% incorporate bias detection during testing phases, and 22% assess model interpretability. Issues are further exacerbated by infrastructure and tooling deficiencies. Just 4% of organisations feel their data and infrastructure environments are ready to handle AI at scale. Basic necessities like registries, audit trails, and version control for AI models are often manually managed or absent.
Accountability for AI oversight is fragmented. A mere 9% report a cohesive vision between IT leadership and governance teams, while 19% lack a clear owner for governance activities. Executive engagement remains low, with AI governance primarily driven at a departmental level rather than strategic top-down leadership. This fragmented approach is reflected in the scarcity of organisations measuring governance effectiveness. Merely 18% have established continuous monitoring with Key Performance Indicators (KPIs) to track advancements.
"Our report shows AI adoption is outpacing governance," explained Seb Burrell, Head of AI at Trustmarque. "...93% of organisations are using AI but only 7% have fully embedded governance frameworks."
“Right now, systems and processes haven’t kept up with the speed of innovation. Development teams lack proper tooling and infrastructure, and the issues are compounded by the lack of management buy-in for building robust governance systems.”
James McKeown, AI Specialist and Principal Test Consultant observed that companies are adopting AI with understand risks emphasizing “We see projects moving fast, but often without the checks, controls, or delivery oversight needed to support them. That’s where governance makes the difference. Without it, you’re not just risking compliance gaps, you’re risking poor outcomes, rising costs, and wasted time. Governance isn’t about slowing things down. It’s what helps organisations scale AI safely and effectively."