Legal
Professional conduct obligations, privileged client data, and clients asking how AI touches their matters.
About us
Governance written by people who have had to live under it.
Novareck AI is an independent AI risk and governance consultancy based in Melbourne. We work with organisations that are already accountable to someone, and we build the structures that let them adopt AI without losing that accountability.
Why we exist
Most AI governance fails on contact with reality.
The pattern is familiar. An organisation buys a framework. It is thorough, well-referenced, and written by someone who has never had to operate under it. Six months later the policy is unread, the controls are unfollowed, and the first real audit question exposes the whole thing.
Novareck was built as the correction to that. We start from what is actually running in your organisation, including the tools nobody approved. We write policy people can follow. And we finish by handing the framework to your team rather than embedding ourselves in it.
Principle
Practitioner-led
We have sat on the inside of regulated organisations, answering the questions we now help clients prepare for. That shapes what we build and what we leave out.
Principle
Standards-anchored
No proprietary methodology you have to take on faith. Everything maps to ISO, NIST, the EU AI Act and the OECD and Australian principles your auditors already recognise.
Principle
Honest about fit
If your problem is not one we solve well, we say so on the first call. A wrong engagement costs you more than a declined one.
Small enough to care. Rigorous enough to audit.
What we believe
Governance should make AI easier to adopt.
Too much AI governance is written by people who have never had to operate under it. The result is familiar: policies nobody reads, controls nobody follows, and frameworks that collapse the first time a real audit question is asked.
We start from the opposite end. What is actually running in your organisation, who is using it, on what data, and what would happen if someone asked you to explain it. The framework follows from there, and it is written for the people who have to live with it.
Governance should make AI easier to adopt, not harder to justify.
How we work
Deliberately small.
Novareck is a small, senior team. That is a choice, not a stage we are trying to grow out of. It means the person who scopes your engagement is the person who delivers it, and there is no layer of junior consultants learning on your budget.
Where an engagement needs capability we do not hold in-house, particularly on the build side, we bring in a specialist partner and tell you exactly who is doing what.
01
Senior only
You work with the people who scoped the engagement. No handover to a delivery team you have never met.
02
Fixed scope
A written proposal with defined deliverables before anything starts. No open-ended retainers by default.
03
Partner network
Development and specialist build work is delivered with named partners, disclosed up front.
04
Clean exit, open door
Delivery ends with documentation, training and a handover. Your team runs it from there, and we stay reachable when something new comes up.
Who we work with
Regulated, accountable, and under real scrutiny.
Novareck works across legal, defence, public sector and regulated industry. These are environments where an AI decision has consequences beyond the organisation making it, and where the ability to explain that decision matters as much as the decision itself.
Defence
Classification, supply chain assurance and sovereign data requirements above every technology decision.
Public Sector
Accountability to ministers, ombudsmen and the public, where transparency is not optional.
Regulated Industry
Financial services, healthcare, energy and water, where a regulator is one question from asking how the model decided.
Client names and engagement details are confidential unless a client has agreed in writing to be referenced. We are happy to discuss relevant experience in more detail on a call.
Work with us
Start with a conversation.
Twenty minutes, no pitch deck. We will ask what AI is already running in your organisation and tell you honestly whether we can help.