Questions we hear most.
Short answers. For the full picture, see the 90-day path and the Q Tower FAQ.
What does "AI-governed" mean?
Six things in place: a written AI policy, an AI inventory, an approval workflow in use, all employees trained, a way to report concerns anonymously, and monitoring of what's deployed. It does not mean certified, audited, or compliant with a specific law.
What is the 90-day path?
A defined path from ungoverned to AI-governed with a clear finish line: define the rules in days 1-30, put them to work in days 31-60, and keep it running in days 61-90. It's illustrative and tailored to each company. See the full path.
Is Qualithics a compliance or certification company?
No. We are not an auditor or a certification body, and we do not give legal advice. Our approach is informed by the OECD AI Principles, NIST AI RMF and ISO 42001, but governance done well is useful groundwork if you later pursue a standard, not a replacement for one.
What does Q Tower do with our data?
Q Tower runs entirely inside your own environment: your policies, tool requests, and employee data never leave infrastructure you control, and there's no external database. The one exception is the AI-assisted precheck, which calls the AI tool your organization already uses, with your own API key; point it at a self-hosted model and even that stays internal.
How long does Q Tower take to set up?
Designed to deploy in a day or two. It ships as a Docker bundle your IT team runs in your own cloud tenant or on-prem, and setup is mostly connecting your existing identity provider.
What isn't built yet?
Automatic discovery of AI tools nobody registered is planned but not built; today Q Tower governs AI that is registered or instrumented through it. Employee training is a live session today, with self-paced video modules on the way.
What does this cost?
Pricing depends on org size and deployment scope. Q Tower is a one-time setup fee plus a maintenance and update contract; the initial contract for early customers covers six months of license, maintenance and updates. Request pricing on a call.
Who is Qualithics for?
Growing companies that run on technology: already deploying AI, without yet having the governance, policy, or oversight to match.
Is any of this legal advice?
No. The Governance Compass and our services are a starting point, not legal advice. We'd always recommend your legal or compliance function reviews any policy before you publish it.
Do we need an AI expert on staff to work with Qualithics?
No. You name a part-time governance owner and we guide them through the 90-day path.