How to Implement AI Responsibly: The Role of an External Partner and What the Company Cannot Outsource
By Pedro Sonda, dooop
Implementing AI responsibly means using AI with five elements: a clear purpose, risk assessed and controlled proportionally, prepared people, transparency with those affected, and continuous monitoring. An external partner can accelerate this work by bringing method, references, experience, and neutrality among departments. But four things cannot be outsourced: the decision about what the company agrees to do, responsibility for results, the owner of each use, and the ongoing operation of controls. The best partner enables the company to maintain responsibility independently.
Updated in October 2026.
Why Responsibility Became a Hiring Topic
| Fact | Source |
|---|---|
| 63% of organizations that suffered data breaches had no AI governance policy or were still developing one | IBM, 2025 |
| 70% of people believe AI regulation is necessary, but only 43% consider current laws adequate | KPMG and University of Melbourne, 2025 |
| Air Canada was held liable for incorrect information provided by its website chatbot, despite claiming the chatbot would be responsible for itself | ABA Business Law Today, 2024 |
Interpretation: Lack of governance already has a cost, social and regulatory expectations are increasing, and responsibility does not transfer to the tool or the supplier.
dooop Framework: The 5 Elements of Responsible AI
| Element | In Practice |
|---|---|
| 1. Clear Purpose | Each use has a defined objective, owner, and limits |
| 2. Proportional Risk | Risk classification and controls appropriate to each level; see How to Define Risk Levels for Different AI Uses |
| 3. Prepared People | Users and managers know how to use, verify, and follow rules |
| 4. Transparency | Affected people know when and how AI is involved; there is a channel for contestation |
| 5. Monitoring | Indicators, auditing, and incident handling |
References such as the NIST AI RMF and ISO/IEC 42001 help structure these elements.
dooop Framework: What the Partner Does and What the Company Maintains
| Topic | The External Partner Can | The Company Maintains |
|---|---|---|
| Decisions | Present options, risks, and references | Decide principles, risk appetite, and prohibited uses |
| Structure | Design policy, roles, classification, and controls | Approve and assume the structure |
| People | Train leadership, managers, and teams | Ensure time and reinforcement in daily operations |
| Use Cases | Assess risks and support testing | Have an owner for each use |
| Operation | Support initial audits and reviews | Operate controls and respond to incidents |
Decisions that belong to leadership are detailed in AI Governance: What Should Leadership Decide?. Responsibility for AI-supported decisions is discussed in Does AI Change Responsibility for Decision-Making?.
How to Evaluate a Partner for Responsible Implementation
- Proportionality: Does the partner propose different controls for different risks, or the same package for everything?
- Transferability: In the end, can the company maintain governance without the partner?
- Integration: Does the work connect governance to strategy and training, or only address compliance?
- Independence: Are recommendations dependent on a tool sold by the partner?
- Evidence: Does the partner show examples of policy, classification, and controls in use?
What an AI governance consultancy should deliver is described in What an AI Governance Consultancy Delivers.
What to Do Now
- Check the 5 elements in the most relevant AI uses.
- Separate what to contract and what to maintain based on the table.
- Apply the 5 questions to partners under evaluation.
To implement AI responsibly, learn about AI Governance and dooop's consulting services.
Frequently Asked Questions
Is AI responsibility only about legal compliance? No. It includes compliance but also decision quality, protection of customers and employees, transparency, and trust. A company can be compliant yet still use AI irresponsibly.
Do medium-sized companies need a partner for this? Not always. With method and time, it is possible to do internally. A partner helps when experience, references, or neutrality among departments are lacking.
Also Read
About dooop
dooop is a consultancy based in Caxias do Sul (RS) that prepares leadership and organizations to transform artificial intelligence into business capability through strategy, governance, and training.