Govern the AI Before a Regulator or an LP Asks
AI governance for investment firms comes in two lanes, because two different entities are exposed. Registered advisers (PE and credit funds, RIA family offices) need adviser and SEC governance: policy, supervision, Reg S-P, disclosures, LP DDQ answers. The operating companies a GP owns need secure adoption: acceptable-use rules and safe handling of AI tools. Most GPs need both, for different entities.
AI governance for investment firms is not one document. The fund and its portfolio companies face different questions from different people: an SEC examiner and an LP at the fund, a data breach and a regulated-sector rule at the operating company. Trying to cover both with one policy leaves both thin.
So we split it into two lanes. Pick the one that matches the entity you are protecting, or run both. Vendor-neutral across Microsoft 365 Copilot, ChatGPT Enterprise, Claude, and Gemini. We work on your stack.
By Dr. Leigh Coney, Founder of WorkWise Solutions
Pick the Entity You Are Protecting
Lane A is for the adviser: the fund and the firm that gets examined. Lane B is for the operating companies the fund owns. Different entity, different risk, different document.
Adviser & SEC Governance
For registered advisers: PE and credit funds, RIA family offices. The documentation that holds up when an examiner or an allocator asks how you use AI.
- ✓AI use policy and supervision procedures
- ✓Reg S-P alignment for client and investor data
- ✓Marketing and disclosure review against what the AI actually does
- ✓LP DDQ answers for the GenAI questions allocators now ask
- ✓A mock exam in the $12,500 package
Portfolio Company Secure Adoption
For the operating companies a GP owns. Their staff are already using AI; this gives them rules before something sensitive goes into the wrong tool. A GP can roll it across the portfolio.
- ✓Acceptable-use and shadow-AI policy
- ✓Data-handling rules: what is safe to put in, what is not
- ✓Safe use of tools like Claude and Claude Cowork
- ✓Sector rules where they apply, such as healthcare
- ✓Sponsorable across the portfolio for one consistent standard
The Questions Are Already Being Asked
Governance used to be the thing you got to later. Three changes moved it forward, and all three are live now, not coming.
Reg S-P amendments are in effect
The amended safeguards and incident-response rules now apply to how advisers handle client and investor data, including what touches an AI tool.
SEC exams are asking about AI
Examiners want a written policy, named supervision, and disclosures that match practice. "We use it informally" is not an answer that survives a deficiency letter.
LP DDQs now include AI
Allocator due diligence questionnaires carry GenAI questions. A maintained answer bank turns a fundraising scramble into a paste.
Two live trackers we keep current: the AI Regulation Radar follows federal and state AI rules as they land, and the AI Governance Gap tracker shows what registered firms actually disclose about AI versus what they practice.
A policy written today is wrong in six months: new models, new features, new exam priorities, a new state rule. Keeping both lanes current is what the AI Operating Partner retainer (the Sustain door) does month after month, for the fund and across the portfolio.
Governance FAQ
Which lane do we need?
If you are a registered investment adviser, a PE or credit fund, or an RIA family office, you need Lane A: adviser and SEC governance. If you own operating companies already using AI, those companies need Lane B: secure adoption. The answer depends on which entity you are protecting.
Do we need both?
Often. The fund is a registered adviser and gets examined; the portfolio companies are operating businesses with their own data and their own staff using AI. The two lanes solve different problems for different entities. A GP commonly runs Lane A at the fund and rolls Lane B across the portfolio.
What does an SEC exam ask about AI?
Whether you have a written AI use policy, who supervises AI-assisted work, how you handle client and investor data under the Reg S-P amendments, whether your marketing and disclosures match what the AI actually does, and your vendor due diligence. The $12,500 SEC-exam-ready package assembles the documentation and runs a mock exam, so the answers exist before an examiner asks.
Can a GP roll secure adoption across the portfolio?
Yes. Secure adoption is scoped per company, and a GP can sponsor it across the portfolio for one consistent standard. Ongoing upkeep across the portfolio runs through the AI Operating Partner retainer, which keeps each company's policy current as tools and rules change.
Govern the AI Before You Have To
A 30-minute call to figure out which lane you need: the adviser side, the portfolio side, or both.