What mature AI governance actually looks like

What good practice for staff and student AI use looks like in a real school, area by area.

Ryan Speak
Ryan SpeakCo-founder and CTPO · 29 March 2026 · 5 min read
What Mature AI Governance Actually Looks Like — Arvoe

Australian teachers lead the world in AI adoption: 66% used AI tools in the past 12 months (double the OECD average of 36%). 71% use it to review student data or performance; 46% for lesson planning.

The gap? Governance. Most schools lack systematic policies, vendor reviews, or board-level oversight. It's what we've called the framework gap.

Here's what mature AI governance (Level 3 on the Arvoe Governance Maturity Model) could look like in an Australian school, through an illustrative day.

A day in the life of mature governance

07:30: Morning leadership briefing

The Deputy Principal opens the AI governance dashboard:

  • 42 active AI tools tracked across teaching, admin, wellbeing
  • 87% green status (pre-approved, low-risk)
  • 2 vendor reviews pending (behaviour analytics, grading support)
  • 1 incident closed yesterday (vendor data-sharing clause amended)

Board report auto-generates. Five minutes done.

09:15: Year 10 English class

Sarah wants AI for text scaffolding. She checks the tool register (30 seconds):

  • Tool: Grammarly Education
  • Status: Pre-approved (human review required)
  • Data: No student PII collected
  • Risks: Over-reliance (teacher PD completed)

Sarah logs usage. Students know the rules: AI drafts, Sarah approves, final work is theirs.

11:00: Faculty meeting

Head of English reviews Q1 incidents:

  • 2 over-reliance cases: teacher PD assigned, closed
  • 1 vendor notification: contract amended, closed

Zero escalations to leadership. Lessons learned, risks retired.

14:30: New vendor request

IT submits a behaviour analytics platform. The vendor assessment workflow auto-generates 7 questions:

  • Data retention period? (90 days: pass)
  • Security audit rights? (Annual: pass)
  • ADM disclosure? (Privacy policy updated: pass)
  • Student opt-out? (Manual process: flag)
  • Bias testing? (Independent audit: pass)
  • Incident reporting? (48hrs: pass)
  • IP ownership? (School retains: pass)

Score: 6/7 green. Approved with quarterly reviews.

16:00: Board pack preparation

The principal exports a one-page governance report:

  • 42 tools tracked, 92% compliance, 0 student data incidents
  • 3 risks mitigated, 87% green status
  • Next review: Vendor X (Q3)

Board sees outcomes, not chaos.

The 5 markers of maturity

Mature schools do these 5 things differently:

1. Total tool visibility

Every ChatGPT, quiz generator, lesson planner is logged: owner, data flows, approval status, review cadence.

2. Risks pre-mapped and owned

  • Behaviour AI → bias risk (mitigation: human review)
  • Grading AI → academic integrity (mitigation: process logging)
  • All documented, all owned.

3. Vendors earn trust

No "vendor says it's safe" assurances. Standard clauses. Scored assessments. Annual reviews.

4. Teachers decide fast

Pre-approved lists + green/yellow/red guidance = "Can I use this?" answered in seconds, not days.

5. Boards see clarity

One dashboard. One report. Risk status across the entire portfolio. No surprises.

The maturity ladder

Level 1, Chaos: "Everyone's using ChatGPT somewhere. Hope it's OK."

Level 2, Policy: "We wrote an AI policy last term."

Level 3, Mature: "Every tool tracked, every risk owned, quarterly board reporting."

Level 4, Automated: "Governance scales as tools evolve."

Level 5, Culture: "AI governance is how we operate."

The real upside

Mature schools don't move slower. They adopt faster because risk questions are pre-answered.

  • Teachers focus on teaching, not second-guessing
  • Boards trust the process (5-minute briefings)
  • Parents have confidence in data handling
  • Leadership says "yes" to good tools confidently

December 2026 isn't a deadline. It's proof you've been ready all along.

Where does your school sit?

Take the free 5-minute Arvoe AI Governance Maturity Assessment at www.arvoe.ai. See where your school stands across the eight areas, with your first three actions.

Mature schools aren't waiting for regulators. They're building governance now.


Sources: OECD TALIS 2024 via ISA Independent Insights (Feb 2026); Australian Framework for Generative AI in Schools.

See where your school sits on AI governance.

The free self-assessment scores your school across eight areas and gives you the three things to do first.

Take the free self-assessmentBook a demo
About the authorRyan SpeakCo-founder and CTPO of Arvoe. Ryan has spent his career leading risk and governance programs in large organisations, and now builds Arvoe with Australian independent schools.

Keep reading

All insights →
Making the most of AIThe framework gap: what Australian schools need to know about AI governanceAustralia has a national framework for AI in schools. What it does not have is a roadmap. What that means for your school.Lachlan Bransby · 27 Mar 2026 · 6 min readPrivacy and dataDecember 2026: what every school leader needs to knowAutomated-decision disclosure and the Children’s Online Privacy Code both land by 10 December. Here is what to check, and who should own it at your school.Ryan Speak · 15 Mar 2026 · 7 min readFrom the teamWhy we built ArvoeFrom enterprise risk programs to building software for schools, and why we wanted everything that keeps a school safe in one place.Ryan Speak · 12 Apr 2026 · 10 min read