
The twelve questions an AI use policy has to answer
July 17, 2026
What an insurer, auditor or client reads for in an AI use policy: twelve questions that test any draft, template-started or written from scratch, before someone asks to see it.
Industries · Aquaculture & Fishing
Four consents from three regulators and a seabed lease, a mortality report that goes public a month after filing, and cameras phasing across the priority fisheries: the record answers for the operation, and keeping it defensible is the part you control.
The season already asks a great deal of you. AMSA rewrote the safety system requirements in June 2025, the EPA wants the benthic data, the surveillance audit arrives in spring, and the export listing rules changed underneath the market. Somewhere between the feed barge and the licence renewal, AI arrived in the operation: the feed system decides when the fish eat, the cameras estimate biomass, and someone in the office drafts the incident report in a chatbot because the deadline was four o'clock.
Where this sits for you
Any of those records may one day be read by a regulator, a certifier, an insurer or a journalist, and the reading will turn on a single question: where did a person check the machine's work before it left the building? A written AI position answers that question in advance. It sits beside your SMS, it costs less than your survey, and it holds when the scrutiny comes.
HMRC figures published in February 2026 put Scottish salmon at £828 million in international sales for 2025, a record 111,000 tonnes sold to 45 countries, ahead of cheese, lamb and beef. The sector that carries that number runs on farm records, and the records now pass through AI-assisted systems.
A Scottish marine farm needs planning permission from the local authority, a CAR licence from SEPA, Scotland's environmental regulator, a marine licence from the Marine Directorate's licensing team, and a seabed lease from Crown Estate Scotland, with fish health inspected by the Fish Health Inspectorate. One set of farm records answers all of them.
Farmed-fish mortality reporting is a statutory duty, and the reported figures are published monthly, one month in arrears, on a public website, where a committee, a campaigner or a journalist reads them. The public record is compiled from reports your business files.
Defra, the UK's environment, food and rural affairs department, committed to remote electronic monitoring across five priority fisheries over five years, and the early-adopter phase on large pelagic vessels concluded in March 2026; Scotland's 2024 regulations already mandate REM on pelagic vessels of 12 metres and over in Scottish waters. Once a fishery is in, the vessels in it carry the system, and the footage is read against the logbook, so the two records have to agree.
England's under-10-metre fleet records catches through the Catch App run by the MMO, England's marine regulator, and registration and submission are licence conditions; Scotland's under-10s report through FISH1 forms or the Marine Directorate's app. The catch record went from paper to a system, and the question of what touches it before filing follows.
Since the end of the Brexit transition, each consignment to the EU has travelled on an Export Health Certificate: over 205,000 certificates issued at a sector cost above £40 million by early 2025. The UK and EU have agreed to pursue an SPS agreement intended to remove them; until it takes effect the certificate regime is the present tense, and the records behind each certificate stay yours either way.
Your World
Surveillance audits and certificates
ASC, BAP and MSC certifiers audit the operation's records on a surveillance cadence, with three-year certificates and multi-day, multi-assessor audits.
VMS dropouts and compliance
The vessel tracking units on each boat need to be transmitting, because a VMS dropout is a compliance conversation before it is a technical one.
Biomass limits and reviews
The environmental licence carries biomass limits, benthic monitoring, waste volumes and annual environmental reviews.
Feed conversion, the farm's number
Feed is the largest single cost in salmon farming, and a percentage point of feed conversion is worth millions, which is why the corporates bought AI for feed control.
The Opportunity
The AI is on the farms already: Mowi runs cameras, sensors and AI for biomass, welfare and lice counting across its farming operations, Scotland included, and trade reporting has Scottish Sea Farms introducing autonomous AI-driven feeding at an Orkney site. In Norway, counting systems approved by the regulator can file the statutory lice count; in Scotland, the same class of instrument counts lice for farms whose reported mortality is read monthly in public. The records those systems produce reach a regulator, a certifier or a committee in the operator's name.
No UK statute or regulator guidance yet says how a farm or a fishing business must control the AI that estimates its biomass, adjusts its feed or helps draft the report that reaches the public register: the UK's principles-based approach leaves the operating layer to the operator. Under a written position, AI already does defined work across a UK operation, each task with a named checkpoint before a record leaves the building.
Incident-report first drafts
AI drafts the incident report that goes to two or three regulators at once from the operator's notes, which gets a fast draft under a four o'clock deadline, and a named person checks it against the event before any version is filed.
Feed and biomass summaries
AI summarises feed-conversion and biomass data from the farm software into the evidence the certifier and the EPA expect, which builds the certifier file as the season runs, and the manager confirms the figures against the source before the audit.
Licence and grant correspondence
AI drafts licence correspondence and grant-application text during an emergency-regulation period, which lightens the paperwork when an event hits, and a person reviews it against the licence conditions before it is sent.
Environmental-review drafting
AI drafts the annual environmental review from the monitoring data, which turns the monitoring record into a submission faster, and the manager checks each figure against the benthic record before it goes to the regulator.
These are the workflows the prompt library and the training stand up, under the standard the documents set.
Where to start
The operation's position in about five minutes, twenty plain questions, four readings back.
The office and supervisors to one standard, certificates verifiable at southernsky.ai/verify.
The written AI position: use policy, approved-tools register, named checkpoints before AI-touched records reach a regulator, certifier or insurer, with 90 days of keep-current and team education included, a prompt library that starts the first governed workflow in the office, a recorded briefing, a 30-minute walkthrough call and 30 days of email support. USD $690 founding, then USD $990.
The corporate-level position that joins production AI to the compliance record.
The outputs are governance artifacts, drafted for review and adoption inside your own organisation; where legal advice is needed, it belongs with qualified counsel.
Documented Work

3 role-based workshop days, designed from a 12-department audit · 18 people certified, from maintenance and marine to finance and the executive team · Every participant left with a working AI setup and a reusable Skill built on a real task from their own role · Weeks later, reported publicly by the client: the team using AI more, sharing wins, and a real shift in the day to day
A twelve-department audit produced three role-based workshop days that certified eighteen people across ten departments, with the CHART quality method and the data rule embedded across the team and every certificate carrying a public verification page.
Read full engagement
2,040 indexable pages · 1,645 articles migrated · 146 member and partner listings · Over 1 million requests a month · ChatGPT reading 9,400+ pages in a single day · Cited and fetched live in ChatGPT daily
The Asia-Pacific Superyacht Association (APSA) was running a static HTML website carrying close to fifteen years of content. Southern Sky AI rebuilt it as a platform of 2,040 indexable pages, 1,645 migrated articles, a 146-listing member and partner directory, and 47 events, with structured schema.org data on every page and an llms.txt file. The site now handles over a million requests a month, is cited as a source in ChatGPT, and is read live by AI assistants every day, and in one recent day, ChatGPT's crawler alone read more than 9,400 pages.
Read full engagementReading

2026
The regulators, the obligations, and the moves that matter first.

2026
The EU AI Act and adjacent regimes reaching EU marine operators.

July 17, 2026
What an insurer, auditor or client reads for in an AI use policy: twelve questions that test any draft, template-started or written from scratch, before someone asks to see it.

Written from inside your world
Kristina Agustin
Founder & Principal Digital Navigator, Southern Sky AI
20+ years in international superyacht and maritime operations. Legally trained (LLB, Graduate Diploma of Legal Practice). AI educator and consultant. ATSE Elevate Scholar 2026.
Start Here
Read your operation's position in about five minutes. Twenty plain questions in, four things back: the kinds of AI risk as they reach your operation, the regulations that already apply to you, the cost of leaving that use unmanaged, and the moves that matter most, ranked from the top.
Get your baselineQuestions
The AI Baseline Report reads your position in about five minutes, and your answers pre-fill everything that follows.
Run the Baseline