The governance systems XEIOH ran on were still functioning on the last day of trading.

When the business wound down in 2025, the infrastructure that pharmaceutical clients had first required over a decade earlier was intact. It had been through COVID. Through six years of growth that followed an external crisis. Through a pharmaceutical market that never stood still.

That's the answer to the question most agency leaders only ask when they're already in trouble with it: does governance scale?

Yes. But only if it's built to evolve.

What Actually Breaks

Growth doesn't break governance. It outgrows it.

The informal systems that work at seven staff aren't flawed. They were the right thing for that moment. The founder knows everyone. Decisions travel through conversation. Process lives in people's heads, and relationships keep it coherent.

The problem arrives when headcount passes the point where one person can hold everything. Research on cognitive group scaling suggests that threshold sits at around fifteen people. Below it, management by direct relationship is feasible. Above it, coordination costs begin to exceed what informal systems can absorb.

Here's the arithmetic. At ten people, your team has 45 communication channels to manage. At fifty, that number reaches 1,225. Informal governance was never designed for that load.

The IPA Agency Census 2025 recorded annual staff turnover of 24.8% across the sector. Nearly one in four employees leaving every year. Every departure takes knowledge. Every new arrival brings habits and AI tool preferences from somewhere else.

I watched this play out in detail. A lead medical copywriter had compressed three days of work to three hours using AI. The capability was real. The output was strong. But the prompt library was never built, and the workflows stayed in her head. When the business wound down, the organisational learning went with her.

That's what ungoverned AI scaling looks like. Not a dramatic failure. A quiet, compounding loss. Eric Flamholtz studied this across 683 companies in replicated research. He found a statistically significant inverse relationship between organisational growing pains and financial performance. The agencies experiencing the most friction during growth are not simply having a difficult phase. They are incurring a measurable cost.

A Model Built for This

No governance maturity model exists for UK marketing, creative, digital, or healthcare communications agencies. Not from the IPA. Not from the PRCA. Not in any sector publication I could find. So the one in Chapter 13 is the book's own contribution.

Three stages. Five dimensions.

Stage 1: Foundation (typically 5 to 15 staff). Governance lives with the founder. Not as a formal role — as the natural consequence of being the person who knows everyone and everything. AI tools are probably in use. The agency's formal position is absent or aspirational. On a Tuesday afternoon, governance looks like the founder answering a Slack question and the answer being right because they hold the context.

This is not failure. It's the right governance for this stage. The mistake is staying here past the point where it holds.

Stage 2: Integration (typically 15 to 30 staff). Governance responsibility distributes. The Three Simple Rules are documented — not just understood by the leadership team, but written in a place a new starter can find on day one. Onboarding includes a governance component. There is an AI Assurance Pack that a client can actually read.

On a Tuesday afternoon, governance looks like two account managers giving the same answer when a client asks how the agency handles data. Small. But it only happens when something was written down first.

Stage 3: Evolution (typically 30 to 50 staff). Governance has a clear owner with resource allocated. The Three Simple Rules are versioned and reviewed on a defined schedule. New regulations and new tools trigger a documented update. PPN 017 compliance is demonstrable. The AI Assurance Pack is current, backed by a review cycle a procurement team can inspect.

On a Tuesday afternoon, governance looks like a quarterly review flagging that three team members have been using a new AI tool informally for six weeks, and incorporating it into the approved stack before anyone notices the gap.

One framing note on all three stages: Stage 1 should feel lighter than what you're already doing. Not heavier. It makes visible what you likely already do. Stage 2 makes it transferable. Stage 3 makes it adaptive.

The Evolution Imperative

Installing governance is not the same as maintaining it.

Prosci's research across 2,668 organisations shows that 81% of change initiatives with planned reinforcement succeed. Without reinforcement, that figure drops to 15%. Governance isn't a project. It's a living system.

The reasons it decays are specific and predictable. At 24.8% annual turnover, the average agency loses and replaces close to a quarter of its people each year. Every departure takes knowledge. Every arrival brings different habits. New AI tools arrive faster than governance cycles. Regulation moves. The PPN 017 requirements published in 2025 will be followed by more.

The agencies whose governance still functions at year three are the ones that resourced its evolution. Not the ones that built it once and moved on.

A full-time Head of AI commands between £80,000 and £120,000 in salary, benefits, and overhead. For most agencies in the 5 to 50 range, that is disproportionate to the actual governance work required. What the evolution imperative asks for is ongoing, expert attention: regular, resourced, and deliberately allocated.

What Winning Looks Like

The agency that can answer the governance question today is not done. It needs to still have a real answer in two years, when the team is larger, the tools are different, and the clients are asking harder questions.

XEIOH's governance held because it was used, maintained, and never treated as finished. Not through heroic design. Through structural discipline applied consistently over time.

That's the model. That's what scales.

About the book

This newsletter comes from from Shadow AI Governance: The UK Agency Playbook — a book I'm writing in public about making agency AI usage visible, accountable, and commercially defensible. Chapter 13 maps the scaling journey: the model that shows you where you are now and what the next stage actually requires. The question the final chapter addresses is different. How long the window to lead this category stays open — and what it means to be a GovernFirst agency before governance becomes table stakes.

Want the full chapter?

The newsletter introduces the Governance Maturity Model. The full chapter includes the complete five-dimension reference table, the stage transition triggers, the Cyber Essentials catalyst evidence, and the evolution imperative that explains why governance installed and left alone returns to Stage 1 within eighteen months.

Ready to build this advantage into your agency?

The evidence in this chapter points to one conclusion: governance needs ongoing, expert attention — regular, resourced, and deliberately allocated.

That's what Fractional AI Leadership provides.

If the evolution imperative in this chapter describes something you're already starting to feel, I have quiet conversations about what that looks like in practice.

Keep Reading