A board member asks a simple question: what is our AI investment returning? The room goes quiet. The CTO mentions several active pilots. The CFO references a productivity study from one business unit. No one can produce a number that connects AI activity to earnings. No one can name every AI system currently running in the organization. And if an auditor asked tomorrow to trace a specific AI-influenced decision back to its logic and data, the honest answer would be that the trail does not exist. This is not an unusual board meeting. It is the norm.
This is the third of five constraints we see between AI investment and earnings. We call it The Governance Gap: the pattern where AI deployment outpaces the structures needed to make that deployment auditable, accountable, and connected to financial outcomes.
The pattern
The problem has a name: the governance gap. It is the condition where AI activity accumulates and governance does not keep pace: the organization runs AI it cannot fully inventory, producing decisions it cannot fully explain. Aona AI’s 2026 survey finds that only 23 percent of organizations have a formal AI governance framework, while shadow AI, unsanctioned use outside IT and security oversight, is widespread. The deployment-versus-scale gap makes the same point: roughly 23 percent of organizations are running agentic AI somewhere in the business, but only 2 percent have actually scaled it. Deloitte’s 2026 State of AI in the Enterprise report finds that only about one in five organizations has a mature governance model even for the autonomous AI agents they are actively deploying. McKinsey’s 2025 State of AI survey reports that roughly 39 percent of organizations report any positive EBIT impact from AI, meaning six in ten are deploying AI without seeing material earnings improvement on their own self-reported metrics.
AI activity accumulates. Governance does not keep pace. The result is an organization running AI it cannot fully inventory, producing decisions it cannot fully explain, and reporting results it cannot fully defend.
What it costs
The cost is concrete and compounding. At the most immediate level there is the direct financial loss from abandoned initiatives: millions of dollars per program with no recoverable asset. At the operational level there is the cost of parallel AI ecosystems that no one can map, creating data exposure and compliance risk. At the strategic level there is competitive erosion. BCG’s research identifies roughly 5 percent of firms as future-built, achieving up to five times the revenue uplift and three times the cost reductions from AI compared to peers, while approximately 60 percent see negligible financial impact despite substantial spend. The primary driver of that gap is not model quality. It is operating infrastructure. Governance retrofitted after sprawl is expensive and incomplete. Governance built as a precondition for deployment is what makes AI investment convertible to earnings.
What distinguishes organizations that escape it
Organizations that escape the governance gap treat AI governance as an operational discipline, not a compliance function. They integrate AI oversight into existing risk, audit, and finance structures so that every deployed AI system has an owner, a documented purpose, defined success metrics tied to business outcomes, and a traceable decision log. They establish gate criteria that a pilot must satisfy before advancing to production: evidence of integration feasibility, measurable ROI hypothesis, and regulatory defensibility. They build what Deloitte calls a living AI backbone: a governed data and infrastructure architecture that gives every AI system access to reliable inputs and produces outputs that can be attributed, audited, and connected to financial performance. And they establish a single authoritative inventory of what AI the organization is running, updated continuously, accessible to finance and risk leadership, and reviewable by the board.
These organizations also redesign workflows around AI rather than layering AI onto legacy processes. McKinsey’s research identifies workflow redesign as the single most impactful organizational factor in determining whether AI delivers EBIT impact, yet only about 21 percent of companies report having fundamentally redesigned even some of their workflows.
This is the third in a five-part series on the constraints between AI investment and earnings. The two-week Readiness Assessment names which are operating in your organization, verifiable against your own data, before Q3 planning.