AI Governance, Operated

Everyone is scaling AI.
Almost no one is governing it.

OB.1 is the AI governance firm for small and mid-sized businesses. You get a board-ready plan in weeks, and controls that stay current after it.

The Blueprint Session is where we start.

90% vs 38%90% of organizations report employees using AI. 38% have a written AI policy. That gap is the business.Source: ISACA 2026 AI Pulse Poll, n=3,400+
The Cost of Waiting

Waiting costs you twice.

The risk you carry

Someone else checks your AI first.

The first hard look at your AI can come from a client questionnaire, an insurance renewal, or a regulator's letter. Better if it comes from you.

The growth you miss

The savings stay hidden.

The opportunities sit in the operation until someone writes them down.

Rules Before Tools™

A tool without rules is risk with a login.

Rules Before Tools™ means the decisions, the data limits, and the checks get written first. Then tools get picked to fit them. That is why our first deliverable is a document, not software.

Three Steps, One Sequence

Prove the gap. Then govern it, forever.

The Blueprint writes your rules. Governance runs them, forever. Then the report lands and they leave. We stay.

Service 01 · Start here

Operational Blueprint

The plan. You get a baseline, stakeholder evidence, and a board-ready roadmap. It stands on its own. Take the roadmap and run, or carry it into Governance.

  • Baseline across six dimensions
  • Every recommendation carries confidence
  • Vendor-neutral: vetted partners build to spec
Book my Blueprint →
Service 02 · Architect

Architect

We design, partners build to our spec. We sell no build hours.

Service 03 · Continuous governance

Governance-as-a-Service

Governance is built on your Blueprint. We run the controls, watch for drift, and hand your board a report it can cite every quarter.

  • Policy management, runtime monitoring, human escalation
  • EU AI Act, ISO 42001, NIST AI RMF alignment
  • Quarterly board-citable reporting
See how Governance works →

The Blueprint comes first because Governance runs on what it builds.

How It Connects

We plan. Partners build. We govern.

01

Blueprint

The Operational Blueprint. The gap, proven and planned.

→
02

Build

Vetted partners build to our spec. We don't sell build hours, so the recommendation isn't rigged.

→
03

Govern

Governance operates the plan your Blueprint proved: monitored, escalated, reported. The layer that never leaves.

Inside every Blueprint: Discovery → Signal Intelligence → Governance Architecture → Blueprint Delivery → Stewardship and Evolution.

Find Your Industry

The risk that bites first in your industry.

Generic AI policy fails the first industry question. Pick yours. See the challenge costing you today, what a Blueprint finds, and the rules you answer to.

Law

Your challenge: Your associates already paste into chatbots. Every prompt is a possible confidentiality event, and opposing counsel knows it.

What the Blueprint finds: Where AI speeds intake, research, and drafting, behind guardrails that keep privilege intact and supervision documented.

ABA Model Rule 1.6ABA Model Rule 5.3Privilege

See the Law page →

gated by outside AI regulations counselgated by outside AI regulations counsel
Insurance
Banking
Education
Real Estate & Lending
Logistics
Non-Profit
Before AI Acts in Your Name

The next wave of AI doesn't answer questions.
It takes actions.

Agentic AI sends the email, files the claim, adjusts the price, and updates the record on its own. That power is why governance can't be a PDF on a shelf. Before any system acts in your name, five controls have to be in place. Our Governance service installs and runs all five.

1
Trusted DataIt acts only on data you'd stake a decision on. Source known, quality enforced.
2
Right-Sized AccessIt can touch only what its job requires. Nothing more, checked at every action.
3
GuardrailsHard limits it cannot cross, each one designed, tested, and versioned.
4
Human EscalationAnything consequential stops and waits for a named person, by design.
5
Full Record of Every ActionEvery action logged. When anyone asks what it did, you have the answer.

Most firms will meet agentic AI through a vendor's product before they've decided any of the five.

Proof

How we work.

Rubrics are research-grounded by OB.1 and gated by outside AI regulations counsel before they reach a client. We provide governance architecture, not legal advice.

Chris McCarthy

"Before OB.1, I spent over a decade in operations, learning firsthand what happens when technology gets deployed without a plan. Every tool vendor sells a solution. Nobody sells the blueprint that tells you which solution to buy, and why. We design the plan. Partners execute. No conflicts of interest. Rules before tools. Always."

Chris McCarthy · Founder & Chief AI Officer · Northeast Ohio
The Drafting Table

Pull up a chair. This is how we think.

No scripts, no slideware. Chris and guests work through the AI questions small business owners ask, in plain English.

Read the notes →

Built in Ohio, Built for Builders

Rooted in the region that built things first.

Hudson, Ohio. The Great Lakes corridor. We work with manufacturers, service companies, and family operations that outgrew generic solutions. Building in Northeast Ohio? Ask about the Hometown Builder rate.

Where are you exposed
if your primary model goes dark?

Book a Blueprint Session.

Talk to Chris

Tell us where AI fits in your business. We start with the Operational Blueprint and Diagnostic AI Consulting, and we reply within one business day.