Adaptive AI governance, built for how your organization works.

Governance scaled to your needs, with oversight that meets your organization the way it works.

Fractional AI governance and advisory

  • AIGPArtificial Intelligence Governance Professional
  • ISO/IEC 42001 Lead ImplementerBSI
  • CIPMCertified Information Privacy Manager

AI is arriving faster than the rules for it.

  • You can't see it all

    Teams already use AI tools and agents that nobody inventoried or approved.

  • Policy stays on paper

    Rules exist, but they aren't part of how work actually gets done.

  • Standards are moving

    ISO/IEC 42001, the NIST AI RMF, and the EU AI Act are outpacing internal readiness.

  • Heavy-handed gets ignored

    Governance that stops the business gets worked around. The answer is governance sized to you.

Fractional AI Governance

A governance lead for your organization, without the full-time hire.

I act as your AI governance lead on an ongoing basis, sized to your organization. The focus is on controls that work in practice, staying ahead of coming regulation, and a clear path to long-term ownership inside your own team.

It is built to be right-sized: the support grows or shrinks with your AI use and your appetite for risk.

Book a discovery call

What it focuses on

  • Governance controls that fit how your organization operates
  • Reviewing how coming regulation affects your AI use
  • Performance monitoring summaries for leadership
  • Guidance as your AI use and risk change over time
  • Continued support toward long-term ownership, and transition to your organization

Who it's for

Organizations with growing AI use and no governance owner, firms answering client AI questionnaires, and teams preparing for ISO/IEC 42001, the NIST AI RMF, or the EU AI Act.

Focused consulting outcomes.

Some organizations need a specific result, with or without ongoing support. These are available as standalone engagements, or as part of fractional governance.

1 See it

AI & Agent Inventories

You can't govern what you can't see. Surface shadow AI, third-party APIs, and autonomous agents so decisions rest on facts.

AI Risk & Impact Assessments

Find bias, privacy, and safety issues before a high-stakes system goes live, not after.

2 Govern it

Corporate AI Policies

Clear, usable rules: what data goes where, how outputs are vetted, and who owns what.

Custom Governance Frameworks

A repeatable oversight loop aligned to the NIST AI RMF and built into your existing governance, right-sized to your organization.

3 Prove it

EU AI Act & NIST AI RMF Readiness

Know where you stand against the EU AI Act and the NIST AI RMF: your risk tier, your documentation gaps, and what to do first.

ISO/IEC 42001 Readiness & Implementation

A practical path to certification, led by a BSI-certified Lead Implementer.

Approach

Right-sized, practical, and learned in pilots.

  1. Right-size it

    Match governance to your size, risk, and maturity. Not a canned program.

  2. Meet you where you are

    Governance fits your current tools, processes, and pace. Work changes only where it helps.

  3. Start with a problem

    Build governance around one real use case, then expand outward by risk severity.

  4. Learn through pilots

    Expand based on what you learn, not on a master plan.

  5. Governance that moves

    It's living, actionable at the right levels and times, and the business doesn't stop for it.

John Molendyk

About

John Molendyk

Principal Consultant, Adaptive AI Governance

I started Flowhaus.ai to support organizations through the complex environment around artificial intelligence. For 20+ years I have been guiding organizations through change, from understanding why, then what, through implementation of technology and process.

My background spans financial services, healthcare, and technology, and brings together AI governance, process engineering, product delivery, and human-centered design.

AI Governance & Privacy

  • AIGP
  • ISO/IEC 42001 Lead Implementer (BSI)
  • CIPM

Process Engineering & Product Delivery

  • Six Sigma Black Belt
  • Certified ScrumMaster (CSM)
  • Certified Scrum Product Owner (CSPO)

Human-Centered Design

  • M.S., Human-Computer Interaction & Design, UC Irvine

Education: B.A., Organizational Leadership

Contact

Start a conversation.

Book a 30-minute discovery call. We'll talk about where you are with AI, what's at stake, and whether I can help.

Prefer to write first?

Send a note and I'll reply within two business days.