DRAXION BLOG

AI governance. Written by people who build it.

Practical guidance on shadow AI, regulatory compliance, and enterprise AI governance — from the Draxion team.

FEATURED

EU AI Act Article 9: What ‘appropriate risk management’ actually means for your AI governance program

Most organizations interpret EU AI Act Article 9 as requiring a risk management system for high-risk AI. What it actually requires is significantly more specific — and most compliance teams are not meeting the standard they think they are.

Draxion Team · May 20, 2025 · 8 min read

Read Article →

EU AI ACT

Why 56% of employees use AI tools their IT team has never approved

The data is consistent across every organization we have spoken to. The question is not whether your employees are using unapproved AI — it is how many tools, which data, and what your liability is.

Draxion Team · May 22, 2025 · 6 min read→

EU AI Act

EU AI Act enforcement starts in August 2026: Is your organization ready?

The prohibited AI provisions of the EU AI Act became enforceable in February 2025. The high-risk AI obligations come into force in August 2026. Most organizations are not ready. Here is what you need to do.

Draxion Team · May 18, 2025 · 9 min read→

Compliance

The difference between a GDPR policy and GDPR compliance

Having a written AI acceptable use policy is not GDPR compliance. It is evidence that you identified the risk. Here is what actual compliance looks like — and how regulators test for it.

Draxion Team · May 15, 2025 · 7 min read→

Shadow AI

ChatGPT is not your biggest shadow AI problem

Organizations spend their governance energy on ChatGPT because it is visible. The real exposure is in the 15–20 other AI tools your employees are using that you have never heard of.

Draxion Team · May 12, 2025 · 5 min read→

GDPR

GDPR Article 28 and AI vendors: What your DPA must cover

Every AI vendor your employees use is a data processor under GDPR Article 28. Most enterprise AI vendor contracts do not satisfy Article 28 requirements. Here is what to look for.

Draxion Team · May 8, 2025 · 8 min read→

Security

How to build an AI governance program in 30 days

A practical, step-by-step guide for IT security and compliance teams who need to demonstrate AI governance to their board or auditors — without a six-month project timeline.

Draxion Team · May 5, 2025 · 10 min read→

Get the latest on AI governance.

Weekly insights on shadow AI, regulatory updates, and enterprise governance — from the Draxion team.