What is the AI Board Governance Compass?

The AI Board Governance Compass is a proprietary assessment framework developed by Vela Board Advisors. It maps board readiness across 16 governance indicators and four dimensions: Individual (director AI literacy and personal accountability), Board (collective oversight capability), Organization (alignment between executive leadership and board-level AI signals), and Stakeholder (regulatory, insurer, and investor expectations). It produces a scored diagnostic that surfaces governance gaps and a priority queue for action.

What are board directors personally liable for in AI governance?

Board directors can face personal liability for AI governance failures including failure to exercise adequate oversight, approving misleading AI-related disclosures (AI washing), and failing to establish defensible governance processes. D&O insurance often does not cover AI-specific incidents, creating a gap between assumed and actual coverage that boards need to actively map.

How should boards oversee AI deployments?

Boards should establish a baseline of AI literacy among directors, create clear escalation pathways for AI risk, review fairness and bias testing practices, understand the insurance coverage architecture across D&O, cyber, and E&O policies, and maintain a documented governance record demonstrating active oversight. The AI Board Governance Compass provides a structured way to assess and improve across all of these areas.

What is AI washing and why does it matter for boards?

AI washing occurs when a company overstates the capabilities or use of AI in its products or communications. Directors who approve such communications without adequate scrutiny can face personal liability. Boards need the skills to identify AI washing risks in materials brought for approval.

Does D&O insurance cover AI governance failures?

Standard D&O insurance frequently does not cover AI-related governance failures in the way boards assume. Coverage gaps often exist at the intersection of D&O, cyber liability, and E&O policies. When an AI system causes harm, each insurance tower may claim the loss belongs to another, leaving boards exposed. Mapping this coverage architecture is a board governance responsibility.

What is the four-step Vela engagement model?

Vela engagements follow four stages: (1) Assessment, the AI Board Governance Compass maps readiness across 16 indicators and establishes a defensible baseline; (2) Workshop, a facilitated session built around the board's real risks and opportunities; (3) Simulation, a live AI governance scenario where directors make real-time decisions to build instincts; (4) Record, a structured governance record demonstrating active oversight to regulators, insurers, and shareholders.

The Voice on the Call | Board Case Study

The situation

You chair the audit committee of a mid-cap company with global operations. Two hours ago, a treasury analyst joined a video call with what looked and sounded exactly like the CFO, who urgently authorized a $7.4M wire to a new "acquisition escrow" account. The analyst followed every step of the approval workflow. The CFO was on a flight and never made the call.

The voice, the face, and the mannerisms were AI-generated from public earnings-call footage. The funds have cleared into a correspondent bank overseas. The team caught it only when the real CFO landed and saw the confirmation. The same deepfake package could be used again before markets open.

You are the director they reached first. Recovery odds drop by the hour, the breach may be disclosable, customers and counterparties share the same vulnerability, and the controls that failed were the ones the board was told were sufficient.

“The wire cleared two hours ago and the voice on the call was never the CFO. You're the first director we reached, what do we do in the next hour?”
Group Treasurer

The decision on the table

Sequence the first hour: recovery, law enforcement, banking partners, and internal containment, in what order.
Decide what is disclosable and to whom, when the facts are still moving.
Confront that the failed controls were the ones the board was assured were adequate, and what must change before the next attempt.

The Voice on the Call

Run this case with your board.