Should you build AI governance or buy an AI governance platform? Build the parts whose requirements your own business writes: policy thresholds, evaluation cases, and the integrations into your systems. Consider buying the parts whose requirements regulators, standards bodies, and auditors write and revise: the evidence trail, control mapping, and reporting.