AI is moving fast. Your data foundations probably aren’t.

We sit with with **Ed Morris from Transform Logic** to break down the practical steps teams need to take *before* they roll out AI tools across the business.

You’ll hear why **legacy systems and “unknown data”** are still the biggest hidden risk, how **data leakage** happens in day-to-day workflows (including what people paste into ChatGPT), and why spending an extra hour getting governance right can save days—sometimes **millions**—later.

Ed explains how Transform Logic helps organisations:

* **Find and classify sensitive data** (so you actually know what you have, where it lives, and who can access it)
* Set up **information governance** that supports innovation (so AI governance isn’t a handbrake)
* Reduce risk while meeting **Australian privacy obligations** and preparing for tighter regulation and enforcement

AI rollout is rarely a “tool problem” — it’s a **people, culture, and education** journey.

### Who this episode is for

If you’re a **CIO, CTO, CISO, Head of Data, Product leader, founder, or ops lead** trying to introduce AI safely (without creating a compliance nightmare), this one is for you.

### Keywords to help this rank (naturally embedded)

AI governance, data governance, data sovereignty, information governance, data leakage prevention, sensitive data discovery, data classification, Australian Privacy Principles, AI risk management, legacy systems, privacy compliance, enterprise AI adoption, secure GenAI.

### Chapter Markers
0:00 Welcome + first guest of 2026 (Ed Morris, Transform Logic)
0:32 How to stay secure in the AI era (sovereignty + leakage risks)
8:05 Ed’s background: from building tech to focusing on data + governance
17:16 Legacy systems: why data gets messy fast in real businesses
19:09 What finance teaches about risk appetite and controls
26:07 Practical AI risk management: setting governance that supports delivery
32:15 Mapping your data flows (Salesforce/SAP, onboarding, “where does data go?”)
34:03 Data minimisation and retention: the “CV” example and why it matters
46:11 Discover + classify sensitive data (privacy, ISO standards, red flags)
50:02 RAG + embeddings: the hidden “data sent overseas” problem
58:10 Regulation lags reality: how leaders should respond anyway
68:36 Final takeaways + wrap up

Support the show

Other Links
🎙️our podcast links here: https://digitalnexuspodcast.com/
👤Chris on LinkedIn - https://www.linkedin.com/in/pcsinclair/
👤Mark on LinkedIn - https://www.linkedin.com/in/markmonfort/
👤 Mark on Twitter - https://twitter.com/captdefi

SHOWNOTE LINKS
🔗 SIKE - https://sike.ai/
🌐Digital Village - https://digitalvillage.network/
🌐NotCentralised - https://www.notcentralised.com/

YouTube Channel: https://www.youtube.com/@DigitalNexusPodcast
X (twitter): @DigitalNexus