How does your team handle AI governance documentation?

Curious how organisations are actually handling this in practice. Do you have a structured process for documenting which AI tools are in use, who owns them, what data they touch, and what the risks are? Or is it still mostly spreadsheets, PDFs, and informal notes? Asking because I keep seeing this come up as a real gap. Would love to hear how people are dealing with it. submitted by /u/Ok_Principle3174 [link] [comments]