AI Governance: Some Assembly Still Required

some assembly required

Leadership signed off on an AI tool. A governance framework exists somewhere in a shared drive. For the clinicians, supervisors, and IT staff who interact with that tool every day, the question that matters is more immediate: what does this actually change about how I do my work?

AI governance in behavioral health gets most of its attention at the executive level, where frameworks are designed and risk tolerances are set. That attention is warranted.

Governance succeeds or fails in the workflow, where frontline teams are the ones using the tools, noticing the problems, and deciding whether the reporting process is worth the effort. The organizations that build frontline participation into their governance model are the ones whose frameworks hold up under real operational pressure.

Knowing What’s Approved and What Isn’t

The most basic operational requirement of AI governance is clarity. Staff need to know which tools are sanctioned, for which tasks, and with which data. That sounds simple. In practice, it is one of the most common points of failure.

Shadow AI does not emerge because clinicians are careless about compliance. It emerges because approved alternatives are unclear, inaccessible, or slower than the unauthorized option. The AMA’s 2026 physician survey found that 73% of physicians anticipate AI will reduce administrative workload through automation (AMA, 2026). When staff face documentation backlogs and the approved path to AI assistance is ambiguous, they solve the problem with whatever tool is available. That is a rational response to a governance gap.

Behavioral health organizations face compounding challenges here. Health IT adoption among behavioral health providers has historically lagged behind other specialties, driven in part by unstable funding, exclusion from federal incentive programs, and complex privacy requirements surrounding substance use disorder records (ASPE/HHS, 2024). When new AI tools arrive in that environment, the gap between what leadership has approved and what staff understand to be approved can be wider than anyone realizes.

IT managers play a critical translation role here. Governance policy needs to become accessible guidance that clinical staff can act on without reading a framework document. Approved-tool registries, brief role-specific reference materials, and clear boundaries around what data can and cannot flow through AI tools reduce ambiguity and protect staff from inadvertent compliance violations.

Staff don’t use unauthorized AI tools because they ignore policy. They use them because policy hasn’t kept up with their workflow problems.

Recognizing When Something Doesn’t Look Right

Governance documents define monitoring standards. Frontline teams execute them. That means the people using AI tools daily need to understand what normal output looks like well enough to recognize when something is off.

This is particularly important in behavioral health, where AI outputs can influence treatment planning, documentation accuracy, and patient-facing communications. Clinical supervisors are the first line of AI quality assurance. They review the work that AI tools produce or assist with, and they are positioned to catch outputs that are clinically questionable, biased, or factually wrong before those outputs reach a patient record.

Federal policy is moving toward formalizing this expectation. ONC’s HTI-1 rule established transparency requirements for predictive decision support tools in certified health IT, including standards that ensure clinical users can access source attribute information and evaluate the basis of AI-generated recommendations (ONC, 2024). The regulatory direction is clear: human reviewability is a requirement, and the humans doing the reviewing are frontline clinicians and supervisors.

Escalation paths must be simple and known. When a clinician notices an anomaly in an AI-generated output, three things need to be immediately obvious: who do I tell, how do I report it, and what happens next. Complex or ambiguous reporting structures suppress the very feedback that governance depends on. Every unreported anomaly is a missed data point that leadership needs to calibrate risk thresholds and refine the governance framework over time. The NIST AI RMF defines its Measure function as the ongoing tracking of AI systems for harm, bias, and performance degradation, and that tracking depends on the observations of the people closest to the tools (NIST, 2023).

The most important AI governance sensor in your organization is the clinician who notices something doesn’t look right and knows exactly who to tell.

Turning Frontline Experience Into Governance Intelligence

Governance frameworks that scale well treat frontline experience as essential input. Staff using AI tools daily observe failure modes, workflow friction, and unintended consequences that leadership cannot see from a dashboard or a quarterly report. That operational knowledge is governance intelligence, and most organizations underutilize it.

Structured feedback mechanisms make the difference. Brief periodic surveys, standing agenda items in team meetings, and direct channels to governance owners turn anecdotal observations into data that leadership can act on. The format matters less than the consistency. A feedback loop that runs quarterly builds a governance record. A feedback loop that runs once and disappears signals that frontline input was performative.

When staff see their observations result in tangible changes, such as a tool configuration adjustment, a revised workflow, or an updated policy boundary, two things happen. Trust in the governance process increases, and reporting quality improves. Clinicians invest more effort in detailed, useful feedback when they have evidence that the feedback leads somewhere. That cycle is self-reinforcing: better input produces better governance decisions, which produces more trust, which produces better input.

This feedback loop also closes the gap between executive governance frameworks and operational reality. Leadership sets the risk tolerance. Frontline teams test whether that tolerance holds up under real clinical conditions. Both perspectives are necessary. Governance designed at the leadership level and never pressure-tested at the workflow level is governance running on assumptions.

Governance that never hears from the people using the tools is governance running on assumptions.

AI governance is a set of daily practices carried out by the people closest to the tools and the patients. Frontline teams who understand what’s approved, know how to flag problems, and have channels to share their experience are the operational engine that makes governance real.

Leadership builds the framework. Frontline teams prove whether it works. The organizations that invest in both sides of that equation are the ones whose AI governance will hold up as adoption accelerates and regulatory expectations increase.


Does your team know which AI tools are approved, what to do when something looks wrong, and how to share feedback that improves the process? Xpio Health works with behavioral health organizations to translate AI governance frameworks into frontline-ready workflows. Let’s talk about making governance operational.
#BehavioralHealth #PeopleFirst #XpioHealth #AIGovernance #HealthcareAI #ClinicalWorkflow


References

  1. NIST. Artificial Intelligence Risk Management Framework (AI RMF 1.0). National Institute of Standards and Technology. 2023. https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf
  2. AMA. 2026 Physician Survey on Augmented Intelligence. American Medical Association. 2026. https://www.ama-assn.org/system/files/physician-ai-sentiment-report.pdf
  3. ONC. Health Data, Technology, and Interoperability: Certification Program Updates, Algorithm Transparency, and Information Sharing (HTI-1). Office of the National Coordinator for Health Information Technology. 2024. https://www.healthit.gov/topic/laws-regulation-and-policy/health-data-technology-and-interoperability-certification-program
  4. ASPE/HHS. Health Information Technology Adoption and Utilization in Behavioral Health Settings. Office of the Assistant Secretary for Planning and Evaluation, U.S. Department of Health and Human Services. 2024. https://aspe.hhs.gov/sites/default/files/documents/b9f858a38ff71660528cf1e4b8df00fa/HIT-adoption-utilization-bh-settings.pdf