What is AI governance?

AI governance is the framework a business uses to oversee how artificial intelligence is selected, developed, purchased, implemented, and monitored. It can include internal policies, defined responsibilities, risk assessments, data-use standards, human oversight, vendor management, and procedures for reviewing AI systems over time.

Does my business need an AI policy?

An AI policy may be appropriate for businesses whose employees, vendors, or operations use artificial intelligence. A well-designed policy can establish which tools may be used, what information can be shared with them, how outputs should be reviewed, and when additional approval or oversight is required.

What legal risks can businesses face when using generative AI?

Potential concerns include intellectual property rights, confidential information, privacy, cybersecurity, inaccurate outputs, contractual obligations, employment considerations, and representations made to customers. The specific risks depend heavily on how a business uses the technology.

Can employees use public AI tools with company information?

Businesses should carefully evaluate what information employees are permitted to submit to third-party AI platforms. Confidential business information, personal data, intellectual property, customer information, and other sensitive material may create legal or contractual concerns when entered into external systems.

What should we look for in an AI vendor agreement?

Important provisions may address data ownership and use, model training, confidentiality, information security, intellectual property, warranties, regulatory responsibilities, indemnification, limitations of liability, and what happens to company data when the relationship ends.

AI Governance & Emerging Tech

Innovation Moves Fast. Your Legal Strategy Should Keep Up.

AI Governance & Emerging Technology Legal Counsel

Helping Businesses in Iowa, the Omaha Metro, and Nationwide Manage Tech Risk

Artificial intelligence is rapidly changing how businesses operate, make decisions, interact with customers, develop products, and manage information. From generative AI and automated decision-making to machine learning and AI-enabled software, these technologies can create significant opportunities—but they can also introduce legal, regulatory, contractual, and operational risks that businesses may not encounter with traditional technology.

At Wray Law TCP, we help businesses develop practical approaches to AI governance and emerging technology. Based in Glenwood, Iowa, and serving clients nationwide, we work with companies to understand how new technologies fit within existing business operations and how their use may affect privacy, intellectual property, cybersecurity, contracts, and regulatory compliance.

AI governance is not simply about having an AI policy. Effective governance establishes how an organization selects, develops, purchases, deploys, monitors, and manages AI systems. Depending on the business, this may involve determining which AI tools employees can use, what information can be entered into those systems, who is responsible for oversight, how AI-generated output is reviewed, and how potential risks are documented and addressed.

We help clients develop governance structures that reflect their actual operations rather than adopting policies that look good on paper but are difficult to follow in practice. The objective is to help businesses take advantage of emerging technologies while establishing appropriate safeguards around their use.

Call Wray Law TCP at 888-334-8185 to schedule a consultation with a lawyer today.

Case Types

Navigating a Rapidly Changing Legal Landscape

AI regulation is evolving quickly in the United States and around the world. Businesses may face a combination of federal guidance, state legislation, industry-specific requirements, contractual obligations, and international regulations depending on where they operate and how their technology is used.

There is no single U.S. law governing every use of artificial intelligence. Instead, existing laws concerning consumer protection, privacy, discrimination, intellectual property, cybersecurity, employment, and commercial practices may apply alongside newer AI-specific requirements. Federal agencies, including the Federal Trade Commission, have also made clear that existing consumer protection principles can apply to representations about AI products and the ways automated technologies are deployed.

State requirements are becoming increasingly important as well. Businesses operating nationwide may need to evaluate different obligations across jurisdictions, particularly when AI is used to make or assist with decisions affecting consumers, employees, or other individuals. Companies operating internationally may also encounter regulatory frameworks such as the European Union's AI Act and GDPR.

For businesses, compliance begins with understanding where and how AI is actually being used. Common challenges include employees adopting unapproved AI tools, vendors incorporating AI into existing products, sensitive information being submitted to third-party platforms, unclear ownership of AI-generated content, and contracts that fail to adequately address data use or responsibility for AI-related risks.

We help businesses evaluate these issues in a practical, digestible way so leadership can make informed decisions without unnecessarily slowing innovation.

From AI Policies to Emerging Technology Agreements

The legal considerations surrounding AI often extend far beyond regulatory compliance. A new AI platform may raise questions involving ownership, licensing, confidentiality, data rights, cybersecurity, vendor responsibility, and intellectual property—all within a single transaction.

Our approach considers those issues together.

Wray Law TCP can assist businesses with matters involving AI governance programs and internal policies, acceptable-use standards, technology procurement, vendor agreements, AI-related contract provisions, intellectual property considerations, privacy and data governance, cybersecurity risk, and emerging technology transactions.

Contracts deserve particular attention. Businesses purchasing or implementing AI-enabled technology should understand how providers may use company data, whether information may be used to train models, who owns inputs and outputs, what security obligations apply, and how liability is allocated if something goes wrong. Similarly, businesses offering AI-enabled products should carefully consider how their capabilities are represented to customers and how responsibilities are defined within their agreements.

Attorney Bruce Wray approaches emerging technology matters from a business perspective. Rather than viewing innovation solely as a compliance issue, we consider how legal strategy can support responsible adoption while protecting the company's information, intellectual property, relationships, and long-term objectives.

Technology will continue to evolve, and the laws surrounding it will evolve as well. Businesses do not necessarily need to predict every development. They do, however, benefit from governance structures that can adapt as technology, regulations, and business priorities change.

From our home in Glenwood, Iowa, Wray Law TCP works with businesses across the country to navigate that changing landscape with practical, forward-looking legal guidance.

Frequently Asked Questions

What is AI governance?
AI governance is the framework a business uses to oversee how artificial intelligence is selected, developed, purchased, implemented, and monitored. It can include internal policies, defined responsibilities, risk assessments, data-use standards, human oversight, vendor management, and procedures for reviewing AI systems over time.
Does my business need an AI policy?
An AI policy may be appropriate for businesses whose employees, vendors, or operations use artificial intelligence. A well-designed policy can establish which tools may be used, what information can be shared with them, how outputs should be reviewed, and when additional approval or oversight is required.
What legal risks can businesses face when using generative AI?
Potential concerns include intellectual property rights, confidential information, privacy, cybersecurity, inaccurate outputs, contractual obligations, employment considerations, and representations made to customers. The specific risks depend heavily on how a business uses the technology.
Can employees use public AI tools with company information?
Businesses should carefully evaluate what information employees are permitted to submit to third-party AI platforms. Confidential business information, personal data, intellectual property, customer information, and other sensitive material may create legal or contractual concerns when entered into external systems.
What should we look for in an AI vendor agreement?
Important provisions may address data ownership and use, model training, confidentiality, information security, intellectual property, warranties, regulatory responsibilities, indemnification, limitations of liability, and what happens to company data when the relationship ends.

Ready to Talk Business?

Whether you’re forming, growing, negotiating, or navigating a complex business matter, experienced legal guidance can help you move forward with confidence. Call Wray Law TCP at 888-334-8185 today to speak with an attorney about your business.