Aly Silver

AI Governance & Responsible AI · Technical Program Manager

Clear AI policies and a review process your team can actually run. Launching an AI feature, or getting asked how you use AI? I help growing companies and nonprofits answer with confidence. Trained at Brown and Oxford, and I've built a governance program from scratch.

Services: AI Governance Setup, AI Usage and Vendor Review, and Program and Operations Support.

Aly Silver smiling on a tree-lined path, wearing a gray cardigan

Services

AI Governance Setup

For organizations that have launched an AI feature or plan to launch one soon.

You get
  • An inventory of the personal data your AI features and tools use, including what's shared with AI vendors
  • A map of the privacy and AI laws likely to apply, for review with your counsel
  • Draft privacy policy and terms of use language, plus an audit of what you have, for your counsel to finalize
  • A review checklist for every new AI feature, with risk tiers

AI Usage and Vendor Review

For teams leveraging AI tools or bringing in a new vendor.

You get
  • A documented risk review: what the system does, what data it touches, and who could be affected
  • Controls sized to the risk, such as data minimization, retention limits, and access rules
  • Transparency language for users, partners, and contracts
  • Internal AI use policies and AI literacy training

Program and Operations Support

For teams that need structure to deliver.

You get
  • Embedded technical program management across engineering, product, and design
  • Roadmap and OKR development
  • Cross-team review and hand-off processes
  • Test plans and release criteria

How it works

  1. Intro call. A free 30-minute call to discuss what you are looking for.
  2. Written scope. Deliverables and timeline, agreed before work starts.
  3. The work. A mix of collaboration and documentation, built for your team to own.

I'm not a lawyer. Policy drafts are written for review by your legal counsel.

Selected work

Credentials

  • Sc.M., Technology Leadership (AI Governance & Ethics), Brown University, December 2025
  • AI Ethics, Regulation & Compliance Programme, University of Oxford, 2025
  • Certified AI Ethicist (CAIE), 2025
  • AI Governance Intensive, Harvard Data Science Review, 2026
  • Member, All Tech Is Human and Association of AI Ethicists
  • Led and co-created Women in Tech ERGs at multiple companies
Aly Silver smiling outdoors, with curly blond hair and a dark sleeveless top

Let's discuss your AI governance needs

Book a 30-minute intro call, or email me directly.

LinkedIn
Featured

Talks and conversations

Podcast guest · Oxford Saïd Business School · June 2026

Oxford Saïd Voices: Innovation and Strategy

Oxford faculty member Peter Ptashko talks with two alumni of Oxford's online AI programmes about strategic innovation and AI.

I talk about what the AI Ethics, Regulation and Compliance Programme gave me: a working understanding of international AI regulation such as GDPR, ethical decision-making, and the societal impact of AI systems.

Aly Silver speaking into a podcast microphone in a studio
Podcast guest · Trailblaze Marketing · October 2023

What is Ethical AI?

A conversation with host Chris Parisi about the ethics of AI, diversity in tech, and how to build an effective governance task force.

← Selected work
Case study · AI governance

Building AI governance from scratch at a civic recreation startup

Role: governance consultantScope: data, privacy, first AI featureControl: 7-day data retention

The situation

A civic recreation startup had no data governance function. It collected personal data (names, emails, dates of birth) and was about to launch its first AI feature.

What I did

  • Assessed all personal data collected and reviewed applicable law in every state the company operated in, plus GDPR and CPRA.
  • Wrote and iterated the company's first Privacy Policy and Terms of Use.
  • When the team built an in-house people-counting model to show users how busy a court was, I built a governance checklist to document it. It covered what the backend and frontend did, which policies it touched, and what risks it created for the company, its users, and its municipal partners.
  • The core risks were identity and personal security, since the data touched on presence and location patterns.
How footage moved through the system
  1. Court camera captures footageInput to people-counting model
  2. Blur appliedData minimization
  3. Stored for 7 daysMunicipal partners may review
  4. DeletedRetention limit

Nothing retained or shared beyond the 7-day window.

Controls, in detail

  • Data minimization: blurring applied to raw footage.
  • Retention limit: 7-day data retention window, then deletion.
  • Access control: municipal partners could review footage within that window. Nothing was retained or shared beyond it.

Transparency, on two tracks

  • Municipal partners: contract language disclosing the AI feature, so there were no surprises.
  • End users: updated Privacy Policy and Terms of Use, plus an in-app notice explaining that an AI feature was in use and why. Not just buried in legal text.
What this means for your organization

Most small teams don't need a heavy compliance program. They need a clear record of what their AI does, the risks it creates, and controls sized to those risks.

← Selected work
Case study · Bias and fairness

Finding and fixing a skin tone gap in avatar data capture

Role: technical program managerSetting: metaverse research companyGate: attribute checklist

The situation

At a metaverse research company, I worked hands-on with engineers building hardware systems that captured human data for avatar research.

The problem

I asked how the systems performed for people with disabilities, different skin tones, tattoos, and piercings. No one had concrete answers. The operators who ran sessions with participants knew some appearances weren't captured correctly. That data was effectively excluded from the foundational models. It was a known issue, but undocumented.

What I did

  • Pulled together a cross-rank group of researchers, operators, and managers. The consistent gap: no one had documented what could and couldn't be captured.
  • Co-founded the Data Diversity Program with a mission statement and values.
  • Built a checklist covering the full range of physical attributes, then used it to audit existing capture systems.

A concrete finding

The capture suite wasn't reliably capturing darker skin tones, so the data wasn't usable for avatars. We traced it to lighting: at certain brightness levels, darker skin reflected light back as a sheen. We ran lighting experiments with the research team and validated the fix with participants who had darker skin tones. The pipeline then produced accurate avatars for them.

From undocumented gap to standing gate
  1. Ask operatorsKnown but undocumented gaps
  2. Build attribute checklistSkin tone, disability, tattoos, piercings
  3. Audit capture systemsFinding: darker skin not captured
  4. Fix and validateLighting experiments, participant testing
  5. Standing gateEvery system passes before sign-off
The outcome

The checklist became a standing gate. Every capture system had to pass testing across a wider range of appearances before sign-off.

What this means for your organization

Bias often lives in undocumented gaps that the people closest to the work already know about. Asking them, and writing it down, is where fairness work starts.

← Selected work
Case study · Model evaluation

Release-blocking evaluation and benchmarking for a security AI model

Role: AI evaluation and QA leadSetting: early-stage startupGate: false positives over 10% block release

The situation

I led evaluation for a desktop security product at an early-stage startup. It flagged phishing and unsafe links in real time, and flagged personal data being copied into applications.

What I built

  • Two testing scripts, built with Claude Code. One benchmarked the model against a known set of false positives and negatives to catch drift or regression. The other scanned a sample of the top 1M websites, which are presumed safe, to surface new false positives.
  • A human-in-the-loop review: I confirmed each new false positive manually and added it to a known-FP database so engineering could retrain the model.
  • Periodic re-checks of older false positives to confirm whether the model had improved.
The control

Sites known to be safe should never be flagged. If more than 10% of a known-safe benchmark set gets flagged, the release is blocked until the cause is found.

Evaluation loop for each build
  1. New build or model update
  2. Benchmark known FP/FN setCatches drift and regression
  3. Scan top 1M sitesSurfaces new false positives
  4. Human reviewConfirmed FPs go to the known-FP database
  5. Release gateFP rate above 10% blocks release

Above 10%: fix, retrain, and run the loop again. Older known FPs are re-checked periodically.

The control worked

On the 1.0 release, a major UX update shipped with a model update and false positives spiked above 10%. We traced the cause. Most flags were subdomains on known-safe hosting platforms like GitHub and Substack, so we allowlisted those hosting patterns. That resolved most flagged cases and brought the rate back under the threshold.

What this means for your organization

A control only matters if it can stop a release. Set a measurable threshold, track it continuously, and re-check whenever the model or product changes.

← Selected work
Case study · Risk tiering

Risk-tiered and collaborative safety review for autonomous vehicle requirements

Role: program manager, Product teamSetting: autonomous vehicle companyTier: pedestrian = highest

The situation

At an autonomous vehicle company, I was the program manager on the Product team delivering technical requirements for autonomous vehicle behavior.

The problem

Requirements moved through a spreadsheet in sequence: Product drafted, Engineering signed off, then Safety and Legal reviewed. That took weeks. Safety or Legal often flagged issues after Engineering had started building, so the cycle restarted. The churn was expensive and demoralizing.

What I did

  • Proposed moving review into Jira, with Product, Engineering, and Safety/Legal all signing off before engineering work began.
  • Product pushed back hard, worried about overhead. I showed that upfront sign-off would be faster overall because it removed the late rework cycle.
  • Built the full Jira project: workflows, required sign-off gates so nothing advanced without every team's approval, and a bulk upload of existing requirements. Then onboarded Safety and Legal, who had never used Jira.
  • Ran a trial on P0 requirements first. Once Product saw less rework, they were fully on board, and it became the standard process.
Before: sequential review
  1. Product drafts
  2. Engineering signs off
  3. Engineering starts building
  4. Safety and Legal reviewWeeks later

Issue flagged: the cycle restarts after build has begun.

After: parallel sign-off in Jira
  1. Product drafts
  2. Product, Engineering, Safety and Legal sign offRequired gate, no step skipped
  3. Engineering builds

Risk tiering in practice

Not every requirement carried the same risk. Pedestrian interaction requirements were the highest tier and got more review time and scrutiny by default.

One example covered vehicle behavior around pedestrians with disabilities in crosswalks. Product and Engineering wanted to move forward. Safety and Legal needed more time for edge cases. We worked it through in a biweekly working session.

The resolution

Signed off with additional safety controls, which could be revisited once the technology had proven itself.

What this means for your organization

Controls shouldn't be static. Match their intensity to current risk and demonstrated maturity, and define what would trigger a review.

Resume

Aly Silver

Greater New York Metropolitan Area Download PDF

Product and program manager with 10+ years delivering software, hardware, and AI/ML programs at tech companies, from Fortune 500 to startups. I build governance where none exists: risk review, model evaluation, and the cross-team process that makes it stick. Formally trained in AI ethics through Brown and Oxford, with hands-on experience in AI evaluation and deployment.

Experience

Mar 2025 – Present

Independent AI Governance & Product Consultant

Contract engagements
Charlemagne Labs, Inc. · Product & Program Manager, AI Evaluation & QAFeb 2026 – Oct 2026
  • Led end-to-end ML model evaluation for an AI security product, assessing model performance, drift, and reliability to determine whether models were functioning as intended and meeting user-facing quality standards.
  • Oversaw product and program management for QA processes, defining test plans and acceptance criteria used to validate model reliability prior to deployment.
  • Partnered with engineering and product leadership to translate evaluation findings into priorities and roadmap decisions.
  • Managed the pre-sales-to-onboarding journey for on-device ML model deployment, coordinating across product, engineering, and customer-facing teams.
ParkView · Data/AI Governance ConsultantMar 2025 – May 2026
  • Directed the H1 2026 product roadmap, integrating regulatory compliance and safety protocols into the core AI-driven product lifecycle across 3 products.
  • Authored 5 PII removal and data obfuscation policies to meet state-law requirements, ensure platform security, and gain user trust.
  • Evaluated AI product requirements, third-party partner privacy and security policies, and user transparency communications for AI-enabled platforms.
  • Developed internal audit structures, risk-tiering criteria, and data governance frameworks to support ongoing regulatory compliance for AI-driven features.
  • Established internal AI protocols and best practices to ensure teams leverage AI responsibly.
Jan 2023 – Feb 2025

Technical Program Manager

Sonos, Inc.
  • Managed stakeholder communication and program status across key stakeholders, including executives, leading to a 30% increase in project alignment and a 20% reduction in escalated issues.
  • Redesigned the Partner Certification process, including third-party review and onboarding with partners such as Apple, Amazon, and Spotify, cutting certification time from 8 to 6 weeks (25% reduction).
  • Directed software delivery, risk identification, and issue tracking for new product and feature launches from inception through production.
  • Led the Women@Sonos employee resource group (ERG).
Sep 2021 – Jun 2022

Technical Program Manager

Meta Reality Labs
  • Aligned strategy between cross-functional stakeholders, including Legal and Security, to build and iterate data capture systems supporting ML research for the metaverse.
  • Built a roadmap and OKR process with technical research leaders for H1 planning, accelerating program transparency.
  • Revamped the mobile capture system verification process, identifying and resolving 20+ friction points for a ~60% increase in operational efficiency within 8 weeks.
  • Rolled out standardized project management tooling and best practices across 200+ staff members.
  • Co-founded and led a data diversity initiative across the research lab, evaluating existing models and data collection processes to identify and reduce bias, establishing a standard for equitable data practices in AI/ML research.
Dec 2019 – Sep 2021

Product & Design Program Manager

Aurora (fka Uber ATG)
  • Directed cross-functional roadmapping and OKR frameworks across 15 digital products spanning product, design, and engineering.
  • Delivered an internal permissions management tool in under a quarter, working cross-functionally across 4 engineering teams and 3 stakeholder teams.
  • Served as JIRA admin representing Product & Design's tracking requirements, improving cross-team alignment.
  • Identified inefficiencies in the product-to-engineering-to-legal/safety review process for AV system requirements and restructured the workflow to bring risk and safety stakeholders in earlier, reducing rework and improving decision quality.
  • Led the Women@Aurora and Women@Uber employee resource groups.
Jul 2018 – Dec 2019

Sr. Project Manager

American Eagle Outfitters
  • Deployed Jira-based project tracking for the Innovation team, improving on-time delivery 30% and stakeholder awareness scores 25% in the first quarter.
  • Defined technical requirements and acceptance criteria for ML-driven app and site personalization, delivering a 10%+ increase in conversion on recommended products, and led stand-ups, sprint planning, story grooming, and retrospectives across iOS, site, and data science teams.
  • Orchestrated the Facebook Messenger AI chatbot program through external vendor partnerships, increasing active engagement 10%.
  • Founded American Eagle's first employee resource group, Women in Tech.
May 2017 – Jul 2018

Sr. Project Manager

Branding Brand
  • Led a team to deliver a new CMS to clients within 30 days, and established a protocol for implementing products with clients to meet their business KPIs.
  • Managed up to five clients' mobile apps and sites, while their users grew 14%, sessions 18%, revenue 70%, and conversion 17%.
  • Introduced usability testing into the design process, and built a user feedback process that turned feedback into actionable work.
Jul 2015 – May 2017

Product Manager

GEICO

Joined through the Technology Development Program as Application Systems Analyst

  • Led a cross-functional scrum team to deliver the in-app Mobile Virtual Assistant from design to implementation, surpassing business goals.
  • Built the Virtual Assistant roadmap from customer feedback and internal KPIs.
  • Owned the full mobile app redesign and guided the app team in agile practices.
  • Managed the automated testing process for app releases.

Education & credentials

  • Brown University, Sc.M., Technology Leadership, Concentration: AI Governance and Ethics, December 2025
  • Saïd Business School, University of Oxford, AI Ethics, Regulation and Compliance Programme, 2025
  • University of Pittsburgh, B.S., Information Science, Concentration: User-Centered Design, Cum Laude, 2015
  • Certified AI Ethicist (CAIE), November 2025
  • AI Security, Securiti, January 2026
  • 2.5-Week Intensive, AI Governance, Harvard Data Science Review, October 2026
  • Member, All Tech Is Human · Association of AI Ethicists

Expertise

AI Governance & EthicsResponsible AI FrameworksAI Ethics StrategyAI/ML Risk AssessmentQAModel Evaluation (Performance, Drift & Reliability)NIST AI RMFEU AI ActCPRAGDPRRisk Tiering & Control DocumentationThird-Party AI & Vendor ReviewPII Removal & Data ObfuscationRegulatory Roadmap CreationState-Law Compliant Privacy PoliciesData AuditingAgile/ScrumCross-Functional Stakeholder ManagementMonitoring, Evaluating & ReportingTeam Training & Community-Building

Tools

Google SuiteJiraConfluenceAsanaFigmaGitHubTableauClaudeGeminiOxethica