Your team is already using AI. 71% of employees use unapproved tools at work.
Each one creates cascade risk. Data breaches. IP exposure. Quality failures. Lost enterprise clients.
This book shows how to govern Shadow AI without killing innovation.
14 chapters. One per week. Free to read.
Why I Wrote This
I was a partner in two South African agencies. XEIOH and Zonke Ignition.
When a major client payment crisis hit, XEIOH survived. Zonke closed.
The difference was governance. XEIOH had formalised systems — pharmaceutical clients demanded them. When pressure hit, those systems held. Zonke ran on trust and experience. Under extraordinary external pressure, informal governance reached its limits.
Shadow AI is creating the same governance gap in UK agencies now. The agencies building structure around their AI adoption are the ones that will answer client questions with confidence, win procurement processes, and use AI as a commercial advantage rather than a liability they're managing quietly.
This book is the framework for building that structure.
Michael MacDonald
Fractional AI Leadership for UK Agencies | Founder, Brains Before Bots
Publishing Progress
Chapter 7 of 14 Available
■ ■ ■ ■ ■ ■■ ■ ■ ■ ■ ■ ■ ■
Next Chapter: 08 March 2026
Chapter 8: Building Your Governance Foundation in Four Weeks
Publishing schedule: New chapters every Sunday through 20 April 2026
Complete book: Available April 2026
Table of Contents
Explore all chapters of the Shadow AI Governance book.
Shadow AI Governance: The UK Agency Playbook is being published chapter-by-chapter as it's written. New chapters release weekly on Sundays through 12 April 2026.
This serialised approach keeps the content current with UK regulatory developments and incorporates real-world feedback from agency operators navigating Shadow AI governance in practice.
What you're reading
Practical guidance based on research, operator experience from running agencies in South Africa (XEIOH and Zonke Ignition), and formal AI certifications from Wharton, Vanderbilt, and Northeastern University.
What this is not
Legal advice. Regulatory requirements vary by sector, client base, and operational context. For compliance questions specific to your agency, consult qualified legal counsel familiar with UK GDPR, ICO guidance, and your sector's regulations.
Feedback welcome
If you have questions, case studies to share, or feedback on frameworks you're implementing, email hello@brainsb4bots.com. Operator insights improve the work.