AI decision rights in the mid-market: six names, or the seat is a title

A company can appoint a CAIO, Head of AI, or AI Transformation Lead tomorrow.

That still is not AI governance.

An AI function becomes real in the organisation only when six questions have clear answers:

Who may approve?
Who may spend?
Who may stop?
Who may override?
Who carries residual risk?
Who must be informed?

At Beyond Chiefs we call this the Six-Signature Test.

Christian Pobbig and Beyond Chiefs work from Hamburg on AI Executive Search in DACH. The six verbs are not a catalogue from the Stock Corporation Act or the GmbH Act. They are an organisation test: are decision rights and duties actually assigned to a person — or is there only a new title on the chart?

A title does not move corporate management

In a stock corporation the Vorstand manages the company under its own responsibility (§ 76 (1) AktG). In a GmbH the managing director owes the statutory duty of care under § 43 GmbHG.

A new title such as CAIO or Head of AI does not automatically change that organ duty.

Tasks and powers can be delegated. Delegation still needs limits, ownership, escalation, and control.

That is why we ask six questions.

1. Approve

Who may put an AI use into production?

Not: who recommends it?

But: who may decide that a model, agent, or AI-supported process actually goes live — especially when employees, customers, or company decisions are affected?

No name: no clear ownership.

2. Spend

Which resources may the AI function itself commit?

Budget, vendors, models, infrastructure, or advice: up to which line can the function decide alone?

And who sits above that line?

The concrete threshold is the company’s. What matters is that it exists.

3. Stop

Who may halt a live AI use immediately?

If a model produces wrong decisions, data risk appears, or an agent leaves its mandate, the organisation needs a real stop right.

A body that may only recommend does not have a stop right.

4. Override

Who may overrule a stop or a system decision?

This power needs a name too.

Not “the business”.

Not “IT”.

Not the vendor.

A concrete role or person.

5. Carry risk

What duty stays with management or the Vorstand despite delegation?

Tasks can be delegated. Overall responsibility for management, organisation, and adequate oversight does not disappear.

An AI leader, a model, or an outside vendor cannot simply take over the organ’s duty.

So the question is not only:

“Who works with the AI?”

But:

“Who owns the organisation in which this AI works?”

6. Report

Who must be informed after an approval, a stop, or an override?

A working AI operating model defines decision rights and information paths.

Who hears about a critical approval?

Who about a stop?

Who about an override?

And when?

If a name is missing, the role is not finished

That is the test.

A company does not necessarily need a CAIO. It does not necessarily need a new committee.

It does need clear decision rights.

If a Head of AI, CAIO, or AI Transformation Lead cannot answer the six questions, the house may have created a position — not yet a load-bearing leadership function.

Approve. Spend. Stop. Override. Carry risk. Report.

Six verbs.

Six ownerships.

And a simple test for whether AI leadership actually exists in the company.

Mandate

Anyone staffing the six names, not only the title, buys the AI Executive Search mandate.

FAQ

Is a CAIO title enough?

No. Without the six names it is a title.

Are the six verbs law?

No. Beyond Chiefs test. § 76 AktG and § 43 GmbHG keep organ management.

Must every house have a CAIO?

No. It needs clear decision rights.