Adaptive AI governance, built for how your organization works.

Governance scaled to your needs, with oversight that meets your organization the way it works.

Fractional AI governance and advisory

  • AIGPArtificial Intelligence Governance Professional
  • ISO/IEC 42001 Lead ImplementerBSI
  • CIPMCertified Information Privacy Manager

FrameworksNIST AI RMF · ISO/IEC 42001 · EU AI Act · OECD AI Principles · Privacy & data governance

AI is arriving faster than the rules for it.

  • You can't see it all

    Teams already use AI tools and agents that nobody inventoried or approved.

  • Policy stays on paper

    Rules exist, but they aren't part of how work actually gets done.

  • Standards are moving

    ISO/IEC 42001, the NIST AI RMF, and the EU AI Act are outpacing internal readiness.

  • Heavy-handed gets ignored

    Governance that stops the business gets worked around. The answer is governance sized to you.

Fractional AI Governance

A governance lead for your organization, without the full-time hire.

I act as your AI governance lead on an ongoing basis, sized to your organization. The focus is on controls that work in practice, staying ahead of coming regulation, and a clear path to long-term ownership inside your own team.

It is built to be right-sized: the support grows or shrinks with your AI use and your appetite for risk.

Book a discovery call

What it focuses on

Controls
Governance controls that fit how your organization operates
Regulation
Reviewing how coming regulation affects your AI use
Monitoring
Performance monitoring summaries for leadership
Guidance
Guidance as your AI use and risk change over time
Ownership
Continued support toward long-term ownership, and transition to your organization

Who it's for

Organizations with growing AI use and no governance owner, firms answering client AI questionnaires, and teams preparing for ISO/IEC 42001, the NIST AI RMF, or the EU AI Act.

Focused consulting outcomes.

Some organizations need a specific result, with or without ongoing support. These are available as standalone engagements, or as part of fractional governance.

01 See it

AI & Agent Inventories

You can't govern what you can't see. Surface shadow AI, third-party APIs, and autonomous agents so decisions rest on facts.

AI Risk & Impact Assessments

Find bias, privacy, and safety issues before a high-stakes system goes live, not after.

02 Govern it

Corporate AI Policies

Clear, usable rules: what data goes where, how outputs are vetted, and who owns what.

Custom Governance Frameworks

A repeatable oversight loop aligned to the NIST AI RMF and built into your existing governance, right-sized to your organization.

NIST AI RMF

03 Prove it

EU AI Act & NIST AI RMF Readiness

Know where you stand against the EU AI Act and the NIST AI RMF: your risk tier, your documentation gaps, and what to do first.

EU AI ActNIST AI RMF

ISO/IEC 42001 Readiness & Implementation

A practical path to certification, led by a BSI-certified Lead Implementer.

ISO/IEC 42001

Approach

Right-sized, practical, and learned in pilots.

  1. Right-size it

    Match governance to your size, risk, and maturity. Not a canned program.

  2. Meet you where you are

    Governance fits your current tools, processes, and pace. Work changes only where it helps.

  3. Start with a problem

    Build governance around one real use case, then expand outward by risk severity.

  4. Learn through pilots

    Expand based on what you learn, not on a master plan.

  5. Governance that moves

    It's living, actionable at the right levels and times, and the business doesn't stop for it.

John Molendyk

About

John Molendyk

Principal Consultant, Adaptive AI Governance

I started Flowhaus.ai to support organizations through the complex environment around artificial intelligence. For 20+ years I have been guiding organizations through change, from understanding why, then what, through implementation of technology and process.

My background spans financial services, healthcare, and technology, and brings together AI governance, process engineering, product delivery, and human-centered design.

AI Governance & Privacy

  • AIGP
  • ISO/IEC 42001 Lead Implementer (BSI)
  • CIPM

Process Engineering & Product Delivery

  • Six Sigma Black Belt
  • Certified ScrumMaster (CSM)
  • Certified Scrum Product Owner (CSPO)

Human-Centered Design

  • M.S., Human-Computer Interaction & Design, UC Irvine

Education: B.A., Organizational Leadership

Contact

Start a conversation.

Book a 30-minute discovery call. Here's what we'll cover.

  1. Where you are

    Your current AI use, tools, and any governance already in place.

  2. What's at stake

    The risks, regulation, or questions driving this now.

  3. Whether I can help

    A clear read on fit, and whether it makes sense to continue.

Prefer to write first?

Send a note and I'll reply within two business days.