The hardest part of AI is rarely the technology — it's knowing what to do next. I'm John Archbold. After 25 years in technology leadership across financial services and cyber security, I started Underfold to help leaders find clarity and move forward with confidence.
Credentials
2026 — PECB ISO 42001 Lead Implementer (Feb 2026)
2025 — AI Governance Professional — AI Tech & Privacy Academy (Dec 2025)
2024 — Masters of Business Administration (MBA) — Open University
2004 — BSc Computing — Sunderland University
Pre-2004 — National Diploma Information Technology Applications — Newcastle College
In progress: IAPP AI Governance Practitioner
Why i started Underfold
When my employer ceased trading, it gave me the chance to step back and look at the landscape with fresh eyes.
AI was everywhere, and the pattern was the same wherever I looked. Businesses excited about the potential, but stalled by uncertainty. Leaders who wanted to move forward but couldn't answer the basic questions: What's our risk? Where do we start? How do we know we're doing this responsibly? Others were drowning in options and defaulting to doing nothing.
I'd spent years running management systems, defending technology decisions in front of regulators, and helping organisations recover when things went wrong. I knew what good governance looked like — and I knew it didn't need to be heavy or complicated to work.
Underfold exists to help leaders move from uncertainty to action — whether that's building proportional AI governance that enables innovation, or having a trusted advisor in your corner when you're navigating technology decisions alone.
-
I believe governance is an enabler, not a blocker. Done well, it gives leaders the clarity to say yes with confidence rather than defaulting to no out of fear.
I believe no leader should have to figure out AI, security, or technology strategy alone — especially when the pace of change makes it impossible to stay current while running the day job.
I believe smaller businesses deserve the same quality of support that enterprises get — just right-sized for their reality. No 200-page frameworks. No six-month programmes. Practical, proportional, and built to evolve.
Career
25+ years across technology operations, transformation, and cyber security
Technology & Support satisfaction transformed from 45% to 85% in twelve months (Generation IM)
60-person global department, ~$10m budget (Man Group)
Compliance monitoring and FCA engagement across regulated financial services
Customer-facing security advisory, assessments, and incident response (Crossword)
-
Leading client engagements, managing expectations across customers and delivery teams, and heading up security assessments and incident response.
Customer engagement and liaison — primary point of contact for client senior executives, leading technical engagements, translating complex security topics, and building trusted relationships
Expectation management — ensured customers had clear, realistic expectations of service delivery, then worked with the internal team to make sure they understood the deliverables and standards required
ISO 27001 management — owned and maintained the Information Security Management System end-to-end, including internal audits, risk and change management, policy development, and documentation. This hands-on experience with ISO management systems directly informs the ISO 42001 AI management system work Underfold delivers today.
Led security assessments — ransomware readiness, malware assessments, and cloud security reviews
Led incident response — analysing attacks, recommending containment strategies, and providing technical advisory to help organisations recover post-breach
SOC management team — part of the leadership team running the Nightingale managed security operations centre
Maintained and developed the SOC platform — automated onboarding, integrated new data feeds, managed vulnerability reporting
Started as a Technology Consultant (part-time) reviewing department operations, then led a stack upgrade that reduced costs by 30% before moving into the full director role
-
Delivered a technology transformation that changed how the business operated day to day — satisfaction jumped from 45% to 85% in twelve months. When the pandemic hit, pivoted the entire workforce to remote working within a month.
Led the gen:TECH programme — a complete overhaul of the technology platform covering infrastructure, end-user tools, security, and support
Removed 90% of in-house infrastructure, migrating to modern cloud and collaboration platforms
Reduced support tickets from >10 to <5 per user per month
Simplified user authentication from 10+ accounts per person to an average of 2
Delivered estimated £1m/year savings through new technology, support model, and training
Pandemic response — pivoted the entire workforce to remote working within one month
Stakeholder engagement — regular Town Hall presentations, stakeholder meetings, cross-functional collaboration, and a transparency strategy that rebuilt trust in the technology function
Collaborated with the CISO working group on a new information security platform across Risk, Operations, and Technology
Championed bespoke technology training for all employees, including on-demand learning
-
Managed a 60-person global department, extensive compliance collaboration with the FCA, and led infrastructure across virtualisation, communications, and front-line support.
Head of End User Technology (2018–2019)
60-person global department, 6 direct reports, ~$10m combined budget
Developed a three-pillar strategy: Enterprise Consumer, Service Improvement, Stabilisation & Simplification
Delivered Windows 10 to 50% of employees within 9 months
Reduced video conferencing complaints from 10–20/day to 1–2/month
Secured a $1m budget increase for additional headcount
Lead compliance contact for technology — oversaw departments building monitoring systems for insider trading detection, covering logins, messaging, websites visited, and documents opened
FCA engagement — participated in compliance investigations and defended Man Group's systems directly in front of the FCA
Worked closely with compliance on message capture and analysis to meet regulatory requirements
Wintel Infrastructure Manager (2014–2018)
Joined to resolve major performance and stability issues
Delivered a $5m+ 3-year programme to stabilise and upgrade legacy systems
Consolidated disparate teams into a unified department
Led Core Infrastructure, Messaging, and Security teams
Reduced yearly operational spend by $500k through infrastructure overhaul
Invested in new mail gateway technology to counter email-borne attacks
Implemented data access security and permissioning controls to protect critical dataxt goes here
-
Senior Systems Administrator — Orbis Investment Management
System Administrator — Global Asset Management
Desktop and Infrastructure Administrator — IAM Ltd
Linux Administrator — Travel Options Limited
-
Before any of this, I was the neighbourhood IT engineer — building PCs, compiling Linux kernels, and spending far too much time on IRC and the earliest social networks.
Our Principles
Right-sized governance for where you are now, with room to grow
-
Governance should match your current AI use, team size, and risk profile. We start with Minimum Viable Governance (MVG) and help you scale oversight as your AI use matures. Grounded in ISO 42001, NIST AI RMF, and regulatory guidance — always applied in proportion to your reality.
Governance that grows with you — foundations today, maturity as AI evolves.
-
AI regulation, standards, and best practice are moving fast. We continuously track developments across ISO 42001, ISO 42005, NIST AI RMF, the EU AI Act, UK guidance, and emerging Human-AI Governance frameworks — and fold relevant changes into practical, actionable updates. You stay current with confidence.
Governance shaped by your values — and if you're B-Corp, ESG, or CSR-focused, we speak your language.
-
Your AI governance should reflect what you stand for. Every organisation has principles — whether that's how you treat customers, how you make decisions, or formalised commitments like B-Corp certification, ESG frameworks, or CSR policies. We take time to understand your values and translate them into AI boundaries that feel authentic. If you already have ethical frameworks in place, we build on them. If you don't, we help you articulate what matters.
Human Hero, AI Sidekick — governance in weeks, with expertise at every step.
-
We use AI to accelerate research, documentation, and analysis — and every recommendation, policy, and judgement call is shaped by human expertise and understanding of your context. The result: governance delivered faster, with rigour and care built in.