Building AI Governance That Actually Works: What I Learned at Hulu and Nike

September 1, 2025
Anne Bradley

Anne Bradley, Chief Customer Officer at Luminos

The ZwillGen Law Library partnership solves real problems we've been dealing with for 15 years. After building compliance programs at fast-growing companies, we know what works and what doesn't when it comes to building technology governance programs inside companies.

Lesson from Hulu: Meet Your Teams Where They Work

At Hulu, we grew from 200 to over 1,000 employees in two years. We had to build cybersecurity and privacy programs fast, and they had to actually work.

Here's what we learned: If you make compliance too hard, people won't do it. Meet the team where they ALREADY work.

So we did something legal teams at that time never did. We built our first legal approval workflow in Jira. Yes, the same ticket system engineers use for bug fixes and feature requests.

Why? Because that's where engineers already worked every day. Instead of asking them to learn a new system, our legal team met them where they were.

The results were immediate:

  • Ad tracking tech went from an undocumented wild west to 100% reviewed and assessed
  • The legal team implemented SLAs with our business teammates and gave them tracking dashboards to monitor review progress
  • Integration through Jira created automatic audit trails meeting several legal requirements

We also put all our compliance documentation in Confluence and linked it directly to the Jira tickets. Suddenly everyone could see what we were doing and why, without hunting through email chains or shared drives.

The big takeaway: Your compliance process should fit into people's existing workflows, not create new ones.

Lesson from Nike: Global Compliance is Like Tetris - Complicated But Stackable If You Learn the Rules

Nike taught me about a different kind of challenge: managing compliance across 190+ countries, each with their own rules about cybersecurity, privacy, and data.

Every piece of technology we built or bought had to work under American privacy laws, European data protection rules, and dozens of other regulatory frameworks that didn't always agree with each other.

Managing our global privacy policies, terms of use, pricing, and warranty documents became a massive coordination challenge. We needed a way to drive consistency while handling all the different legal requirements.

The breakthrough: Build a platform with the common capabilities we needed for customer policies, and the flexibility we needed to treat customers in different geographies differently.

From displaying different agreements, in different languages, with different consent frameworks by geography, to storing all the permissions in a streamlined back-end.

We focused on creating frameworks with legal guidance built right into the process—not documented separately where people might ignore it.

The Real Problem Nobody Talks About

Over 14 years in-house, I watched the same pattern repeat:

  • Technology gets adopted faster and faster
  • Legal teams grow slowly (if at all)
  • Technical-legal issues get more complex every year

The math doesn't work. You can't hire your way out of this problem, and you can't slow down technology adoption to match legal review capacity.

As an engineer-turned-lawyer, I kept thinking: "We need better tools for legal teams." This wasn't a popular opinion at law firms, but companies loved the idea of making legal workflows more efficient through automation.

Why the ZwillGen Partnership Actually Helps

The ZwillGen Law Library fixes the specific problems I dealt with for years:

Problem #1: Too Many Questions Every law has dozens of questions you could ask on the path to assessing legal compliance and risk. Expert legal counsel, after counseling hundreds of companies, know the best questions to ask in the right order to get to the answer quickly. That expertise—not just what to ask, but how to ask it and when—is baked into the ZwillGen Law Library on Luminos.

Problem #2: Every Country Wants Different Paperwork Luminos handles multiple jurisdictions automatically. One assessment creates compliant documentation for EU AI Act requirements, US state laws, and international privacy standards all at once. The ZwillGen Law Library gives you confidence you're up to date on the latest requirements under each law.

Problem #3: Legal Expertise Becomes a Bottleneck in Testing ZwillGen's legal expertise and Luminos data expertise come together in Luminos testing tools that your technical and data science teams will use to show that your AI meets the emerging requirements. Legal teams can focus on strategy and high-risk use cases, while ZwillGen and Luminos make sure you're using the right statistical tests with the right thresholds to meet legal and risk requirements.

What This Means for Your Company

If you're dealing with the same challenges I faced—manual processes that don't scale, complex multi-country requirements, or teams uncertain about who's on first—this partnership offers a different approach.

For your legal team: You can give clear guidance that technical teams can follow without constant back-and-forth.

For your technical teams: You get compliance requirements built into your existing tools, not bolted on afterward.

For your business: AI projects can move from idea to compliant deployment in days instead of months.

How to Think About Implementation

Based on what worked at Hulu and Nike:

  • Start simple: Pick one workflow and make it work really well before expanding
  • Meet people where they are: Integrate with tools teams already use daily
  • Build in the expertise: Don't rely on people remembering to check separate documentation
  • Measure what matters: Track approval times and completion rates, not just risk mitigation

The ZwillGen Law Library makes this possible by giving you expert legal frameworks designed to work with your existing processes, not replace them.

The Bottom Line

Good AI governance shouldn't slow down innovation—it should enable it. When legal, security, data science, and technical teams can work together efficiently, everyone wins. Now our customers don't have to reinvent the wheel.

If you're facing similar challenges with AI governance, I'd love to hear about them. Reach out at anne@luminos.ai and let's talk about what's working and what isn't.

All Posts