What should I know about AI governance: tool policy?

DACH implementation: AI use in recruiting only with clear process documentation and approvals. Recommendation: define prompt and output classes with mandatory review checkpoints. In practice: DACH setup: define prompt classes (low/medium/high risk) with an approval process. Limitation: Without QA, AI can consistently deliver incorrect or irrelevant recommendations. (Sources: EU AI Act Framework, NIST AI Risk Management Framework)