Home01 Services02 Agent Passport03 Sectors04 Proof05 Pricing06 Self-Assessment07 About08 Contact09

Home / Sectors

Built for regulated environments.

We work with large, complex organisations where AI governance is not optional. The control system core is fixed. A sector overlay adds the regulator-specific obligations, elevated risk classifications and evidence expectations on top. Nothing is rebuilt per sector.

01 / Sector overlays

Same core. Configured edge.

Each overlay is used alongside, not instead of, the core toolkit. It identifies the regulatory obligations specific to the sector, explains how they interact with the six engines, and specifies the additional governance actions required.

AA·SO·INFRA·001

Regulated Infrastructure

For organisations holding licences from Ofgem, Ofwat or Ofcom, and those serving them: gas networks, electricity distribution and transmission, water and wastewater, telecoms. All three regulators have now published AI-specific material, and none of it creates binding AI obligations. Ofgem issued voluntary AI guidance on 20 May 2025, Ofwat published its AI adoption plan in June 2026, and Ofcom published its strategic approach to AI for 2026/27 on 4 June 2026. AI use is therefore governed through existing licence conditions and data obligations, on top of the baseline UK AI Framework, EU AI Act and NIST AI RMF alignment built into the core toolkit.

Ofgem AI guidance (2025)Ofwat AI adoption plan (2026)Ofcom AI approach 2026/27Licence conditionsUK AI FrameworkNIST AI RMF

AI GOVERNANCE LEAD · LEGAL / REGULATORY AFFAIRS · IT SECURITY · EXECUTIVE COMMITTEE

AA·SO·PUB·001

Public Sector

For central government departments, arm's-length bodies and local authorities. The public sector carries an obligation the private sector does not: proactive transparency to citizens. Algorithmic transparency recording has been mandatory across central government since the phased rollout began in March 2024, covering ministerial and non-ministerial departments and arm's-length bodies that provide public-facing services. It is recommended rather than mandated in local government. Equality duties under section 149 of the Equality Act 2010 and data protection scrutiny of automated decision-making apply throughout.

ATRS (mandatory: central government)PSED s.149ICO DPIA / ADMGDS Technology CodeUK AI Framework

AI GOVERNANCE LEAD · SRO · DPO · DIGITAL / TECHNOLOGY DIRECTOR

AA·SO·FS·001

Financial Services

For UK and EU-facing banks, insurers, asset managers, payments and consumer-credit providers. The regulators have been explicit: AI is governed through existing frameworks, not a new AI statute. The Senior Managers and Certification Regime was reformed in April 2026 (FCA PS26/6 and PRA PS12/26) and the scope of the Consumer Duty is under consultation until 18 September 2026 (FCA CP26/23). The direction has not changed. The burden of proof sits with the firm, and a named senior manager is accountable for AI outcomes.

FCA SM&CR (reformed 2026)Consumer DutyPRA SS1/23EU AI Act Annex IIIUS SR 11-7

AI GOVERNANCE LEAD · CRO · MODEL RISK · COMPLIANCE · SMF HOLDERS

AA·SO·HSC·001

Housing and Social Care

For registered providers of social housing, housing associations and adult social care providers. Regulation here turned proactive in 2024 and the compliance clock is running: the four consumer standards have been in force since 1 April 2024, the Housing Ombudsman's Complaint Handling Code became statutory on the same date, and Awaab's Law is being commenced in phases under section 42 of the Social Housing (Regulation) Act 2023, with Phase 2 adding seven further hazard categories from 30 November 2026. Neither the Regulator of Social Housing nor the Housing Ombudsman has published guidance on AI, so AI use is governed through data protection law, the consumer standards and board accountability. The Care Quality Commission set out its role and expectations for AI in health and social care on 21 May 2026.

RSH consumer standards (1 Apr 2024)Housing Ombudsman Code (statutory)Awaab's Law Phase 2 (30 Nov 2026)CQCICO DPIA / ADMUK AI Framework

AI GOVERNANCE LEAD · DIRECTOR OF DIGITAL · DPO · HEAD OF COMPLIANCE · EXECUTIVE TEAM

02 / How overlays work

Four regulator sets. One system.

The overlay applies elevated risk classifications, incorporates additional AI Impact Assessment questions, maintains the evidence the regulators expect, and maps each obligation to the engines that demonstrate control.

Sector-to-core mappingAA·DG·SECTORS
Sector regulators mapped to one control system core Four regulated sectors, each with distinct regulators, all mapping through a sector overlay into the same Ambient Agent control system core. AA·SO·INFRA Regulated Infrastructure OFGEM · OFWAT · OFCOM GAS · ELECTRICITY · WATER · TELECOMS AA·SO·PUB Public Sector ATRS (CENTRAL GOVT) · PSED s.149 · GDS ICO DPIA / ADM · UK AI FRAMEWORK AA·SO·FS Financial Services FCA SM&CR · CONSUMER DUTY · PRA SS1/23 EU AI ACT ANNEX III · US SR 11-7 AA·SO·HSC Housing and Social Care RSH STANDARDS · OMBUDSMAN CODE AWAAB'S LAW PHASE 2 · CQC · ICO SECTOR OVERLAY Elevated risk classes Additional AIIA questions Regulator evidence pack ONE CONTROL SYSTEM CORE Same core. Configured edge. Agent Passport · governance · approvals · decision rights · escalation · reporting spine. The overlay adds regulator obligations and evidence expectations on top of the fixed core. USED ALONGSIDE, NOT INSTEAD OF, THE CORE TOOLKIT

Every regulator asks the same question: can you evidence control at the point of use?

See the regulatory timeline

03 / How to begin

Start with your regulatory context.

The AI Control Diagnostic includes a risk posture assessment aligned to your regulatory context and sector requirements. The deployment plan it produces is configured to your environment, not a generic template.

Book an Alignment Session contact@ambientagent.co.uk

What every overlay adds

O·1

Elevated risk classifications for the use cases your regulator watches.

O·2

Additional AI Impact Assessment questions specific to the sector.

O·3

The evidence pack your regulator expects to see maintained.

O·4

Engine mapping: which part of the system demonstrates each obligation.