Built by someone who saw
what was coming
GovernedAI.io exists because the arrival of AI in healthcare happened faster than governance could keep up. Most healthcare organisations are already using AI in clinical workflows. Very few have the frameworks — or the evidence trail the EU AI Act now demands — to govern it safely.
Aleck Mafu is a Microsoft Systems Engineer and digital health strategist based in Ireland. Before founding GovernedAI.io, he spent years working directly with doctors and nurses — helping clinical teams adopt AI tools safely, build better documentation workflows, and close the gap between what technology can do and what a clinical environment can safely absorb.
That frontline experience — watching clinicians use powerful AI tools with no governance framework around them — is what drove him to build GovernedAI.io. He saw the documentation crisis forming before the regulation arrived to name it.
With a background in systems engineering and online strategic business, Aleck brings something most compliance consultants don't: he has been in the room with the doctors and nurses, understands how they actually work, and has built practical systems — not theoretical frameworks — to make clinical AI defensible.
Now, with the EU AI Act placing direct legal obligations on every healthcare deployer, GovernedAI.io provides the governance infrastructure that clinical AI adoption has always needed: training records, oversight protocols, validated prompt frameworks, and the evidence trail that regulators will ask to see.
Why you can verify us
We are a governance company, so we hold ourselves to the standard we sell. Everything below is independently checkable.
"The future of healthcare is heading somewhere different and profoundly promising. AI will transform the way clinicians work, document, and decide. My job is to make sure that transformation is governed — so it helps patients instead of harming them."— Aleck Mafu, Founder
The Problem We Solve
Healthcare AI is ungoverned. That is a crisis waiting to happen.
Most hospitals and clinics are already using AI in clinical workflows — ambient scribes, documentation assistants, informal chatbot use. The adoption happened fast. The governance did not follow.
Since February 2025, organisations deploying AI have had a legal duty to support their staff's AI literacy (EU AI Act, Art. 4). High-risk duties — human oversight, logging, and fundamental rights impact assessments — were deferred by the 2026 Digital Omnibus to 2 December 2027 (and to 2 August 2028 for AI in medical devices). Surveys suggest only around a quarter of hospitals feel ready.
That is not a technology problem. It is a governance problem. And unlawful processing of patient data carries GDPR fines of up to €20 million or 4% of turnover.
already applies across the EU
feel ready for the AI Act
for unlawful patient-data processing
What We Do
We build the governance evidence your organisation needs.
A half-day session for clinical and administrative staff, with assessment and the completion records your compliance file requires. Closes the longest-standing obligation most organisations have open.
Scored gap assessment against Article 26 duties, healthcare-tuned FRIA templates, AI inventory and registry preparation, human-oversight and incident SOPs, with the training module included.
On-site gap assessment, FRIA facilitation, staff training and a board-ready readiness report, delivered in Ireland with scope fixed in advance.
Start with a free 3-minute assessment
Find out exactly where your organisation's clinical AI governance gaps are. No sign-up. No obligation. Just clarity.
Take the Free Audit Book a Call