Enterprise AI governance organisational design resolves to three operating models in 2026: centralised (a single AI governance function owns policy, procurement, audit, and kill-criterion enforcement enterprise-wide), federated (each business unit owns its AI deployments with cross-unit coordination through a small central function), and hybrid (a central function owns regulatory and procurement; business units own deployment operations and ROI accountability). The dominant 2026 pattern in Fortune 500 enterprises is hybrid, because purely centralised models do not scale past 50-100 deployments and purely federated models cannot satisfy EU AI Act Article 9 risk-management documentation consistency. The right model for a given enterprise depends on three variables: deployment count, regulatory exposure, and the maturity of the existing risk-management organisation. The hybrid model is structurally superior to the alternatives once an enterprise crosses approximately 30 production deployments or operates in two or more EU AI Act high-risk Annex III categories.

Centralised vs federated AI governance organisational design. 90-day review cadence. Watches: (1) Fortune 500 organisational design announcements that shift the dominant pattern (Chief AI Officer org design at large enterprises is still actively forming; expect 1-2 high-profile public reorganisations per quarter in 2026), (2) regulatory enforcement actions that establish a documentation consistency bar that purely federated models cannot meet, (3) consulting industry reports (McKinsey, Bain, BCG, Deloitte) that publish patterns from their advisory engagements, (4) emerging variant models (e.g., the AI Center of Excellence model that some enterprises are positioning as a fourth option).