Service
AI governance consultant for Australian and New Zealand organisations
AI governance is the set of policies, roles and controls that keep your use of AI safe, lawful and accountable. As an AI governance consultant in Australia, we help you set an AI use policy, assign ownership, assess risk and privacy, and build human oversight and monitoring into every agent, in line with Australian guidance.
Vermilion Intelligence is an AI and automation consultancy helping mid-to-large organisations in Australia and New Zealand put AI agents to work on repetitive tasks.
What we help you put in place
Governance shouldn't slow you down. Done well, it's what lets you say yes to AI with confidence, because you know who's accountable, what could go wrong and how you'd notice.
We keep governance proportionate. A single internal reporting agent doesn't need the same controls as an agent that talks to customers.
AI use policy
Clear rules on which tools are approved, what information may be used, and who signs off new uses.
AI register
A simple inventory of the AI systems you use, their owners, purposes and risk levels.
Risk and privacy assessments
Structured reviews of each use case, including privacy impact assessments where personal information is involved.
Human oversight
Defined review and approval points, and the authority to pause an agent.
Vendor due diligence
Questions to ask AI providers about data handling, location, security and model changes.
Monitoring and incidents
How AI performance is tracked, and what happens when something goes wrong.
How it works
How we work on governance
Step 1: Current state
We review the AI already in use, including tools staff have adopted informally.
Step 2: Framework
We draft policy, roles and a risk approach sized to your organisation.
Step 3: Embed
We build the controls into each agent rather than leaving them on paper.
Step 4: Review
We revisit governance as your use of AI grows and guidance changes.
Australian and New Zealand guidance we work with
Privacy Act 1988 and the APPs
The Australian Privacy Principles apply to personal information put into AI systems and to AI outputs that contain it, according to OAIC guidance.
Automated decision transparency
From 10 December 2026, organisations covered by the Privacy Act must explain in their privacy policy when computer programs make, or substantially help make, decisions that significantly affect individuals.
Voluntary AI Safety Standard
The Australian Government's 10 voluntary guardrails (2024), condensed in October 2025 into six essential practices in the Guidance for AI Adoption.
New Zealand Privacy Act 2020
The Information Privacy Principles apply to AI use in New Zealand, including the new IPP 3A on indirect collection from 1 May 2026.
FAQ
Frequently asked questions
How does AI fit with the Privacy Act?
The Privacy Act 1988 applies to personal information you put into an AI system and to AI outputs that contain it. The OAIC advises due diligence on AI products, privacy impact assessments, clear notices, and labelling public-facing chatbots as AI. From 10 December 2026, privacy policies must also explain significant automated decisions.
What is the Voluntary AI Safety Standard?
Published by the Australian Government in September 2024, it set out 10 voluntary guardrails for safe and responsible AI, covering accountability, risk management, data, testing, human oversight and transparency. In October 2025 the National AI Centre's Guidance for AI Adoption condensed them into six essential practices. Both are voluntary.
Is AI governance only for large enterprises?
No, but it should be proportionate. A mid-sized organisation might need a short AI use policy, an owner for each agent, a register of AI tools and a privacy check for anything touching personal information. The essentials are knowing who's accountable, what the AI is allowed to do, and how you'd notice a problem.
Do we need to tell customers when they're dealing with AI?
In Australia, the OAIC recommends that public-facing AI tools such as chatbots are clearly identified as AI, and that privacy policies explain your use of AI. Being upfront also builds trust. We design customer-facing agents to identify themselves and to offer a way to reach a person.
Related services and solutions
AI readiness assessment
A structured review of your processes, systems and data that shows where AI is likely to pay off, and what to automate first.
Customer service
Agents that answer common enquiries, triage requests and draft replies across email, chat and phone.
Financial services and wealth
Advice practices, wealth managers, lenders and insurers: fact-finds, advice drafts, file notes and reconciliations.
Healthcare and allied health
Practices and clinics: referrals, intake forms, reminders, claims preparation and correspondence.
Tell us about the repetitive work you'd like to hand over
Send us a short description of the tasks, the team and the systems involved. We'll reply with an honest view of whether AI agents are a good fit, and what an assessment would look at.
Or email raj@vermiliong.com.au