--- title: AI Governance Services description: Explore AI Governance in Aotearoa New Zealand with expert advice tailored for organizations managing AI risks and strategies. url: https://www.taiuru.co.nz/ai-governance/ markdown_url: https://www.taiuru.co.nz/ai-governance.md type: page slug: ai-governance author: Karaitiana Taiuru published: 2026-09-16T02:49:54Z modified: 2026-10-22T08:11:33Z language: en-NZ word_count: 1411 tokens: 2484 --- # AI Governance Services Taiuru & Associates Ltd provides independent AI governance advice in Aotearoa New Zealand. We help boards, government agencies, iwi and hapū, Māori organisations, universities, and technology companies decide whether, how, and under whose authority AI should be used—then build the policies, controls, and accountability needed to prove it. Our advice is grounded in Te Tiriti o Waitangi, Māori Data Sovereignty, tikanga Māori, and practical organisational risk management. It is led by Dr Karaitiana Taiuru. Request an initial discussion → Who is this service for? We work with organisations that are deploying, procuring, building, or regulating AI systems, including: Boards and executive teams seeking independent AI risk and strategy advice. Public sector agencies designing automated decision-making or AI-enabled services. Iwi, hapū, and Māori organisations assessing AI proposals or protecting Māori data and taonga. Universities, research institutes, and CRIs using AI in research, teaching, or administration. Technology companies developing AI products or training models using New Zealand data. Organisations reviewing vendor contracts, AI procurement, or existing AI governance frameworks. We are based in Ōtautahi Christchurch and work nationwide. What is AI governance? AI governance is the system of decisions, accountabilities, policies, and controls an organisation uses to ensure its use of artificial intelligence is lawful, ethical, safe, and trusted. In Aotearoa New Zealand, strong AI governance must also give effect to Te Tiriti o Waitangi and recognise Māori authority over Māori data, knowledge, and taonga. Good AI governance answers practical questions before deployment: Should this AI system be used at all? What decisions can it make, influence, or support? Who is accountable if it causes harm? What data is being used, reused, or used for model training? How are Māori rights, data, knowledge, and taonga protected? What human oversight, escalation, and review controls are required? How will the organisation evidence compliance and responsible use? Why AI governance matters in Aotearoa AI is already shaping decisions that affect people in Aotearoa New Zealand: who receives a benefit, whose image is captured, whose knowledge trains a model, and whose voice is excluded. Treating AI governance as a technical side-issue creates avoidable legal, reputational, cultural, and social-licence risk. For boards and executives, it is a core governance responsibility. Our approach Most AI governance frameworks used in New Zealand are imported. They often manage technical and commercial risk well, but treat Māori rights as a consultation step or a footnote. Our approach starts from five principles. 1. Te Tiriti o Waitangi is a threshold, not a checkbox Te Tiriti obligations are assessed before an AI system is approved—not added afterwards as an engagement exercise. 2. Architecture, not decoration We test whether Māori provisions in an AI policy actually change decisions, controls, and accountability. If a Māori principle could be removed without changing how the system operates, it is decoration rather than architecture. 3. Sovereignty, not just residency Storing data in New Zealand is data residency. Māori Data Sovereignty concerns who controls access, use, reuse, model training, and deletion. We assess both, drawing on the Waitangi Tribunal’s findings in WAI 2522. 4. Rangatiratanga sits with iwi and hapū Engagement with one pan-Māori body does not discharge obligations to the iwi and hapū whose people, data, and taonga are affected. 5. People remain accountable Every automated or AI-assisted decision should have a named human accountable for its outcome. We define when people are in the loop, on the loop, or answerable for the result. AI governance services AI governance frameworks and policy We develop practical AI policies, acceptable-use rules, risk appetite statements, approval gates, and governance structures that work in day-to-day operations. Typical deliverables: AI governance framework, AI acceptable-use policy, decision rights matrix, risk appetite statement, approval workflow, and implementation guidance. Board and executive advisory We provide briefings, director education, and independent advice on AI strategy, risk, accountability, procurement, and emerging regulatory expectations. Typical deliverables: board briefing, executive workshop, risk briefing, decision paper, independent review, or ongoing advisory support. AI risk and impact assessments We assess cultural, ethical, privacy, legal, and social risks before an AI system is deployed. This includes algorithmic bias, impacts on Māori, automated decision-making risks, and harms to individuals or communities. Typical deliverables: AI impact assessment, cultural risk assessment, bias and harm review, mitigation plan, and go/no-go recommendation. Te Tiriti and Māori Data Sovereignty reviews We independently review AI programmes, procurement processes, and vendor contracts against Te Tiriti obligations and Māori Data Sovereignty requirements. Typical deliverables: Te Tiriti review, Māori Data Sovereignty assessment, procurement review, contract clause recommendations, and engagement guidance. Generative AI and mātauranga Māori We advise on training data, scraping, cultural intellectual property, consent, provenance, and the appropriate use of te reo Māori and mātauranga Māori in AI systems. Typical deliverables: data-use assessment, cultural IP risk review, generative AI policy, model and vendor due diligence, and guidance on te reo Māori and mātauranga Māori use. Automated decision-making and human oversight We design oversight models, escalation paths, review points, and accountability arrangements for automated decisions—particularly in public services. Typical deliverables: human oversight model, decision classification, escalation pathway, monitoring framework, and accountability map. Policy critique and submissions We provide independent analysis of government AI guidance, legislation, standards, and consultation proposals. Typical deliverables: policy critique, submission, regulatory analysis, or expert commentary. What you receive Every engagement is tailored, but clients commonly receive: A clear assessment of AI risk, obligations, and decision points. Practical recommendations that can be implemented by boards, executives, and delivery teams. Governance controls that connect policy to real operational decisions. Independent advice that is not tied to an AI vendor or platform. Clear treatment of Te Tiriti, Māori Data Sovereignty, tikanga, and cultural risk. Evidence and documentation suitable for internal assurance, procurement, or public accountability. Why choose Taiuru & Associates? Dr Karaitiana Taiuru has worked on Māori technology sovereignty since 2006. He co-founded the Institute of AI Governance, is a Member of the Institute of Directors, and holds Standards New Zealand appointments to international ISO/IEC committees, including SC 42 (Artificial Intelligence). This gives our advice an uncommon combination of: International AI standards experience. Board and governance expertise. Deep knowledge of Māori rights, tikanga, and Data Sovereignty. Independent, vendor-neutral advice. Our work is also informed by original Māori AI frameworks developed by Dr Taiuru, including He Tangata, He Karetao, He Ātārangi, a kaupapa Māori framework for artificial intelligence. [View professional credentials →] [Explore original frameworks →] AI governance FAQs Why does AI governance in New Zealand need to consider Te Tiriti o Waitangi? AI systems often use data about Māori people, communities, and knowledge, and their decisions can affect Māori outcomes. Te Tiriti o Waitangi guarantees Māori authority over taonga, which the Waitangi Tribunal’s WAI 2522 findings recognise as including data. AI governance that ignores Te Tiriti creates legal, reputational, and social-licence risk. What is the difference between data residency and Māori Data Sovereignty? Data residency concerns where data is physically stored. Māori Data Sovereignty concerns who has authority over that data: who can access it, use it, reuse it, train AI models on it, and delete it. Data can be stored in New Zealand and still remain outside Māori control. What is the architecture-versus-decoration test? It tests whether Māori provisions in an AI policy or system are structurally operative. If removing a Māori principle would not change any decision, control, or accountability, then that principle is decoration rather than architecture. Is consulting one national Māori body enough? No. Rangatiratanga is held by iwi and hapū. Organisations should engage with the iwi and hapū whose people, data, and taonga are affected by an AI system, rather than relying solely on a single pan-Māori body. Who should be accountable for AI decisions? A named person should be accountable. Every automated or AI-assisted decision needs clear rules about when people review decisions before they take effect, monitor them during operation, or answer for outcomes afterwards. Does Taiuru & Associates sell AI software? No. We provide independent advice only. Because we do not sell software, our recommendations are not tied to any vendor or platform. Recent AI governance analysis Social Licence and Te Tiriti o Waitangi Human Oversight in Automated Decision Making Ministry’s AI Guidance – wrong Māori advice Māori Data Sovereignty and the Fragility of Borrowed AI Mana Without Mātauranga – Digital Ethics Talk to us If your organisation is deploying AI, writing an AI policy, procuring an AI system, or needs an independent view on whether its current approach would withstand scrutiny, we can help. Contact Taiuru & Associates → Last updated: 8 October 2026