Is AI governance a product or a programme?

Software can enforce rules; it cannot decide what the organization considers sensitive, who owns which policy, or how often a rule should be revisited. Deployments that skip those decisions end up with a capable platform enforcing a thin and ageing rule set.

Centralpoint carries the programme structure in the product: Skill Owner and Review Cadence are fields on the rule, the governance dictionary is a maintained artefact rather than a configuration screen, and the registries expose current state as live feeds so overdue rules surface as a query. The decisions remain the organization's; what the platform supplies is that they are recorded, reviewable and enforced rather than implicit.