When I shared a keynote at the IoD Governing AI Forum earlier this year, one gap stopped the room. Infoxchange's 2024 Digital Technology in the Not-for-Profit Sector Report found 76% of not-for-profits across Australia and New Zealand are now using AI tools — a 52% jump on the year before. Yet other research I shared found only 3% of trustees report AI use in their organisations.
That gap has stayed with me ever since. It tells us the governance challenge isn't about the future. It's about the present. AI is already in our organisations — in someone's grant draft, in a volunteer's meeting notes, in the "smart" features quietly switched on inside the software we already pay for.
Minding that gap, this piece is a practical follow-up. It's for NFP directors, trustees and committee members who want to bring AI out of the shadows and into conscious, values-led discussion. And it ends with something I was asked for again and again after the forum: a free simple “AI guideline” template you can adapt for your own organisation.
AI governance is a mission alignment issue
It's tempting to treat AI as an IT question and hand it to whoever is "good with computers". But for not-for-profits, AI governance is not just a technical issue — it's a mission alignment issue.
Trust is everything in our sector: community trust, public trust, donor trust. The communities many NFPs serve — including Māori, Pasifika, Rainbow, Disability and ethnically diverse communities — are also those most likely to be disadvantaged by AI systems trained on mainstream data. That makes AI governance a question of equity, stewardship and integrity, not just compliance.
From shadow AI to governed AI
Most organisations I speak with are somewhere on this journey:
Shadow AI: quiet, informal experimentation. Little visibility, little accountability.
Acknowledged AI: the board knows it's happening and has started asking questions.
Guided AI: a simple guideline is in place, people know what's OK and what isn't.
Governed AI: AI use is part of regular risk, strategy and reporting conversations, and reviewed as things change.
You don't need to leap to step four overnight. Moving from step one to step three is the most important shift, and it's very achievable for a small board.
Five questions every board can ask this month
Good AI governance is about better questions, not better tools. Directors don't need to master every platform or acronym. But they do need enough AI literacy to ask:
Where are we already using AI? Including AI built into tools we already use, like email, CRM, design, fundraising or accounting software.
What data is flowing where? Especially personal, sensitive or community data — and whose servers does it end up on?
Who is accountable? Which person decides what tools get used, and how does that come back to the board?
Is it serving our purpose? Does this use of AI help us deliver our mission, or is it "AI for AI's sake"?
Who might be left out or harmed if we get this wrong? And have we asked them?
Keep humans in the loop
AI can support, augment and synthesise. It should not replace human judgment where care, ethics and accountability are involved. The cautionary tale of NEDA's eating disorder chatbot, deployed in a vulnerable context without enough human oversight is a reminder of what's at stake.
There's a flip side, too. "Vigilance fatigue" the constant checking, verifying and reviewing that responsible AI use requires, is real. For volunteer directors who are already time-poor, that mental load matters. Good guidelines help by making the defaults clear, so not every decision has to be made from scratch.
Don't forget the opportunity
This isn't only about risk. Smaller organisations have always had to do more with less. Used well, AI can take on repetitive, admin-heavy tasks so people can spend more time on relationships, complex decisions, care, creativity and community. At the forum, directors shared how they're already using AI to prepare crisis scenarios, scan the market, support funding decisions and prompt better governance conversations.
The goal isn't less AI or more AI. It's intentional AI.
Useful NZ and international resources
MBIE's Responsible AI Guidance (July 2025) a voluntary guide that explicitly includes non-profits, released alongside New Zealand's first national AI strategy.
AICD and the Human Technology Institute's AI Governance Checklist for SME and NFP Directors (v2): a practical three-stage checklist: foundations, building, and continuous development.
Principles of Māori data sovereignty (Te Mana Raraunga): essential reading for any organisation holding data about or with Māori communities.
The Privacy Act 2020 and the Office of the Privacy Commissioner's AI guidance: AI doesn't change your privacy obligations; it raises the stakes.
Community Governance Aotearoa & BoardPro Roadshow: governing with impact, in the new AI world event & resources
Your free ‘AI guidelines’ template
Below is a starting-point template, drawing on the AICD/HTI checklist, MBIE's guidance and the conversations from the IoD forum. Adapt it to your size, your values, your voice and your communities; a two-page guideline that people actually read beats a twenty-page policy nobody opens. Where you see [square brackets], fill in your own relevant details.
AI Guidelines Template
A ready-to-brand, board-approvable AI guidelines document — principles, a traffic-light guide to using AI, roles and a simple AI register.
Download PDF (opens the AI Guidelines Template, 1.7 MB, 3 pages)AI Guidelines template — plain text / Markdown
Copy it straight into a doc, or download it as a Markdown file.
Build your own, in your own brand
Copy this prompt into your AI tool of choice (ChatGPT, Claude, Gemini...). It will ask you a few questions, then draft your own guidelines — and can style the result to match your brand.
This template is a general starting point, not legal advice. Check it against your own obligations, including the Privacy Act 2020 and any funder or sector requirements.
A closing whakaaro
There is still so much to learn, unlearn and relearn. No board will get this perfect — and that's OK. What matters is being willing to look, to ask difficult questions, and to resist both blind enthusiasm and blanket fear.
Start with a conversation. Then a register. Then guidelines. That's governance in motion.
If you’re interested in learning more about AI Governance for NFP directors, please join us for an upcoming IoD Webinar (8 Dec 2026).
Sources: Reflections on the IoD Governing AI Forum 2026 keynote · AICD/HTI AI Governance Checklist for SME and NFP Directors · MBIE — AI strategy and business guidance · MBIE — Responsible AI Guidance for Businesses (PDF) · Te Mana Raraunga · Office of the Privacy Commissioner AI guidance · Infoxchange — 76% of NFPs using AI tools · 3% trustee statistic