We help organisations govern AI with evidence their boards can rely on.
Theodora AI Advisory works with leadership teams and boards, from start-ups and scale-ups to large enterprises, across the UK, Ireland and Europe. We build the governance structures and board reporting that let them use AI with confidence and show regulators how it is controlled.
AI Governance · EU AI Act · ISO/IEC 42001 · NIST AI RMF · UK AI Cyber Security Code of Practice · GDPR & Data Governance · ICO Guidance
Why the firm exists
Theodora Monye founded the firm after working in pharmaceutical and contract research organisations, where she watched companies adopt AI faster than their governance could keep up. Their leaders cared about the risk. What they lacked was someone who could turn the regulation into decisions an executive team could act on.
That gap shapes our work. We combine legal and regulatory understanding with operational experience, so compliance obligations become controls that people use in their day-to-day decisions.
When AI governance is weak, the consequences fall on named people: the director who answers to the regulator, or the team whose system is withdrawn. So every engagement starts with accountability, by making clear who decides and who answers to the board.
What we believe
- Governance belongs in everyday decisions. A policy only counts when it shapes how teams approve AI systems and how risk reaches the board.
- Frameworks should make decisions easier. The EU AI Act, ISO/IEC 42001 and the NIST AI RMF are most useful when they help people decide with confidence, and we apply them in that spirit.
- AI risk is mainly an organisational question. The technology matters, but the harder work is building the skills and accountability that keep governance working after an engagement ends.
- Scrutiny should match the risk. A low-risk internal tool and a high-risk customer-facing system need different levels of oversight, and we design for both.
How we work
We work directly with leadership teams and boards, and we shape each engagement around the organisation's own operating context and regulatory exposure.
The work ranges from EU AI Act readiness and AI risk frameworks to preparing for a first conversation with a regulator or the board about AI. Clients also have access to the Governance Hub, a private portal where their AI system register, risk register and board evidence stay current throughout the engagement.
If you want advice that gives you a straight answer rather than a safe one, we would be glad to speak.
Founder
Theodora Monye, Founder and Principal Advisor
Theodora has spent more than a decade leading operations and change in global, heavily regulated organisations, where she saw first-hand what makes governance work in practice. She holds an LLB (Hons) and an Executive MBA from Warwick Business School, and the Institute of Directors Certificate in Company Direction.
Start the conversation
Every engagement begins with a focused discovery call, with no obligation. If your organisation is working out how to govern AI, or how to answer your board's questions about it, this is the place to start.
Book a discovery call