Loading…
57 days
Super Intelligence definition proposal due (60 days) · Nov 28, 2026 · See what changes
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
376 articles by Johnie T Young
Governance·13 min
Read →DOJ Bulk Data Rule Tightens Health Data Security for Teams
DOJ's Bulk Data Rule compels small health teams to keep data in the US, ban foreign tools, and enforce health data security as security laws tighten.
health datanational securitycompliancesmall teams
Governance·8 min
Read →AI Vendor Supply Chain Security: Checklist for Small Teams (2026)
Respond within 24 hours: AI vendor supply chain security checklist to map exposure, scope access, and contain a contractor breach like Vercel's.
ai-securityvendor-risksupply-chainincident-response
Governance·8 min
Read →AI in Virtual Data Rooms: Compliance and Governance Guide (2026)
AI features in VDRs create data handling and compliance obligations. Access controls, training opt-outs, and audit log requirements before enabling VDR AI.
vendor-riskdue-diligenceai-compliancegovernance
Governance·9 min
Read →AI Vendor Due Diligence Checklist (2026): 30 Questions Before You Sign
30-question AI vendor due diligence checklist: security, data handling, compliance, and contract terms. Pass/fail criteria for each. Copy into your review.
vendor-riskdue-diligencechecklistai-security
Governance·16 min
Read →Amazon KDP AI Disclosure: Exact Checkbox Wording, Policy & Decision Flowchart (2026)
Which box do you check? Copy the exact Amazon KDP AI disclosure wording for text, images, and translations, plus a 3-question decision flowchart.
ai-complianceamazon-kdpai-disclosuregovernance
Governance·8 min
Read →GitHub Copilot and AI Code Assistants: Governance and IP Risk (2026)
GitHub Copilot has 4.7 million paid users. Does your GitHub Copilot governance policy cover source code exposure, IP risk, and org settings yet?
ai-securitygovernanceai-complianceip-risk
Governance·15 min
Read →Can Sam Altman be trusted? Elon Musk wants a jury to answer Big Tech’s hottest question.
Musk OpenAI lawsuit exposes corporate governance risks in AI labs. Lessons from Elon Musk vs. Sam Altman on trust, mission drift, and safeguards. Practical
templateschecklistsworkflows
Governance·15 min
Read →The Denominator Problem in AI Governance
Denominator problem in AI governance: practical overview for small teams — policy baseline, risk controls, weekly review loop. Includes copy-paste checklis
templateschecklistsworkflows
Governance·9 min
Read →AI Governance for Healthcare Startups: HIPAA, HITECH, and the EU AI Act
ChatGPT.com is not HIPAA compliant by default. Healthcare startups need a BAA, a PHI data boundary, and an EU AI Act plan for diagnostic tools.
hipaahealthcareeu-ai-actcompliance
Governance·8 min
Read →How to Add AI Tools to Your SOC 2 Program
SOC 2 auditors now ask about ChatGPT, Copilot, and Claude. Which Trust Service Criteria AI affects, what evidence you need, and how to scope AI tools.
soc2complianceai-securityvendor-risk
Governance·9 min
Read →Notion AI vs Microsoft 365 Copilot: Compliance for Small Teams
Notion AI and Microsoft 365 Copilot handle data retention, training opt-out, and EU residency differently. Governance comparison for small teams in 2026.
vendor-riskai-toolsgdprgovernance
Governance·8 min
Read →Understanding the Denominator Problem in AI Governance
The Denominator Problem hampers AI governance by obscuring incident rates, making risk measurement and compliance decisions unclear for small teams.
Denominator ProblemAI governancerisk measurementincident reporting