Organization size predicts readiness more consistently than intent does: decision-makers at $100M+ enterprises are roughly twice as likely as smaller organizations to have documentation and lineage in place (72% vs 35%) and to be building internal governance frameworks ahead of requirements (59% vs 30%). They are also further ahead on establishing accountability for AI outputs and decisions (72% vs 47%) and engaging legal counsel (58% vs 28%).
That gap has less to do with company size than with timing. Either governance was already built into how the enterprise operates, or it still has to be assembled once the regulation lands. The enterprises documenting lineage today are not doing so in anticipation of a future audit. They are doing it because the platform already works that way, which makes the audit trail a byproduct of how they operate rather than a separate undertaking.
For enterprises trying to get ahead of AI regulation, third-party certification is becoming the shortest path to demonstrable readiness. Collibra's AIUC-1 certification for Maestro Assistant, Collibra’s AI-powered assistant, makes Collibra the first Data and AI governance company to have one of its agents certified against AIUC-1. AI Command Center includes an out-of-the-box AIUC-1 assessment that helps organizations assess their AI against AIUC-1 requirements, identify gaps and take concrete steps toward alignment. This gives AI leaders external validation of the controls this survey shows most organizations are still assembling.
