The hardest part of AI is rarely the technology — it's knowing what to do next. I'm John Archbold. After 25 years in technology leadership across financial services and cyber security, I started Underfold to help leaders find clarity and move forward with confidence.

A digital illustration of John Archbold, a bearded man with styled hair, wearing a beige sweater, looking to the right.

Credentials

  • 2026 — PECB ISO 42001 Lead Implementer (Feb 2026)

  • 2025AI Governance Professional — AI Tech & Privacy Academy (Dec 2025)

  • 2024Masters of Business Administration (MBA) — Open University

  • 2004 — BSc Computing — Sunderland University

  • Pre-2004 — National Diploma Information Technology Applications — Newcastle College

In progress: IAPP AI Governance Practitioner

Why i started Underfold

When my employer ceased trading, it gave me the chance to step back and look at the landscape with fresh eyes.

AI was everywhere, and the pattern was the same wherever I looked. Businesses excited about the potential, but stalled by uncertainty. Leaders who wanted to move forward but couldn't answer the basic questions: What's our risk? Where do we start? How do we know we're doing this responsibly? Others were drowning in options and defaulting to doing nothing.

I'd spent years running management systems, defending technology decisions in front of regulators, and helping organisations recover when things went wrong. I knew what good governance looked like — and I knew it didn't need to be heavy or complicated to work.

Underfold exists to help leaders move from uncertainty to action — whether that's building proportional AI governance that enables innovation, or having a trusted advisor in your corner when you're navigating technology decisions alone.

  • I believe governance is an enabler, not a blocker. Done well, it gives leaders the clarity to say yes with confidence rather than defaulting to no out of fear.

    I believe no leader should have to figure out AI, security, or technology strategy alone — especially when the pace of change makes it impossible to stay current while running the day job.

    I believe smaller businesses deserve the same quality of support that enterprises get — just right-sized for their reality. No 200-page frameworks. No six-month programmes. Practical, proportional, and built to evolve.

Career

  • 25+ years across technology operations, transformation, and cyber security

  • Technology & Support satisfaction transformed from 45% to 85% in twelve months (Generation IM)

  • 60-person global department, ~$10m budget (Man Group)

  • Compliance monitoring and FCA engagement across regulated financial services

  • Customer-facing security advisory, assessments, and incident response (Crossword)

  • Leading client engagements, managing expectations across customers and delivery teams, and heading up security assessments and incident response.

    • Customer engagement and liaison — primary point of contact for client senior executives, leading technical engagements, translating complex security topics, and building trusted relationships

    • Expectation management — ensured customers had clear, realistic expectations of service delivery, then worked with the internal team to make sure they understood the deliverables and standards required

    • ISO 27001 management — owned and maintained the Information Security Management System end-to-end, including internal audits, risk and change management, policy development, and documentation. This hands-on experience with ISO management systems directly informs the ISO 42001 AI management system work Underfold delivers today.

    • Led security assessments — ransomware readiness, malware assessments, and cloud security reviews

    • Led incident response — analysing attacks, recommending containment strategies, and providing technical advisory to help organisations recover post-breach

    • SOC management team — part of the leadership team running the Nightingale managed security operations centre

    • Maintained and developed the SOC platform — automated onboarding, integrated new data feeds, managed vulnerability reporting

    • Started as a Technology Consultant (part-time) reviewing department operations, then led a stack upgrade that reduced costs by 30% before moving into the full director role

  • Delivered a technology transformation that changed how the business operated day to day — satisfaction jumped from 45% to 85% in twelve months. When the pandemic hit, pivoted the entire workforce to remote working within a month.

    • Led the gen:TECH programme — a complete overhaul of the technology platform covering infrastructure, end-user tools, security, and support

    • Removed 90% of in-house infrastructure, migrating to modern cloud and collaboration platforms

    • Reduced support tickets from >10 to <5 per user per month

    • Simplified user authentication from 10+ accounts per person to an average of 2

    • Delivered estimated £1m/year savings through new technology, support model, and training

    • Pandemic response — pivoted the entire workforce to remote working within one month

    • Stakeholder engagement — regular Town Hall presentations, stakeholder meetings, cross-functional collaboration, and a transparency strategy that rebuilt trust in the technology function

    • Collaborated with the CISO working group on a new information security platform across Risk, Operations, and Technology

    • Championed bespoke technology training for all employees, including on-demand learning

  • Managed a 60-person global department, extensive compliance collaboration with the FCA, and led infrastructure across virtualisation, communications, and front-line support.

    Head of End User Technology (2018–2019)

    • 60-person global department, 6 direct reports, ~$10m combined budget

    • Developed a three-pillar strategy: Enterprise Consumer, Service Improvement, Stabilisation & Simplification

    • Delivered Windows 10 to 50% of employees within 9 months

    • Reduced video conferencing complaints from 10–20/day to 1–2/month

    • Secured a $1m budget increase for additional headcount

    • Lead compliance contact for technology — oversaw departments building monitoring systems for insider trading detection, covering logins, messaging, websites visited, and documents opened

    • FCA engagement — participated in compliance investigations and defended Man Group's systems directly in front of the FCA

    • Worked closely with compliance on message capture and analysis to meet regulatory requirements

    Wintel Infrastructure Manager (2014–2018)

    • Joined to resolve major performance and stability issues

    • Delivered a $5m+ 3-year programme to stabilise and upgrade legacy systems

    • Consolidated disparate teams into a unified department

    • Led Core Infrastructure, Messaging, and Security teams

    • Reduced yearly operational spend by $500k through infrastructure overhaul

    • Invested in new mail gateway technology to counter email-borne attacks

    • Implemented data access security and permissioning controls to protect critical dataxt goes here

    • Senior Systems Administrator — Orbis Investment Management

    • System Administrator — Global Asset Management

    • Desktop and Infrastructure Administrator — IAM Ltd

    • Linux Administrator — Travel Options Limited

  • Before any of this, I was the neighbourhood IT engineer — building PCs, compiling Linux kernels, and spending far too much time on IRC and the earliest social networks.

Our Principles

Graphic with black background, green shapes forming arrows and squares, and pink text saying 'PROPORTIONAL BY DESIGN'.

Right-sized governance for where you are now, with room to grow

  • Governance should match your current AI use, team size, and risk profile. We start with Minimum Viable Governance (MVG) and help you scale oversight as your AI use matures. Grounded in ISO 42001, NIST AI RMF, and regulatory guidance — always applied in proportion to your reality.

Neon sign with two interlocking circular arrows in green and the words "Always Evolving" in pink below.

Governance that grows with you — foundations today, maturity as AI evolves.

  • AI regulation, standards, and best practice are moving fast. We continuously track developments across ISO 42001, ISO 42005, NIST AI RMF, the EU AI Act, UK guidance, and emerging Human-AI Governance frameworks — and fold relevant changes into practical, actionable updates. You stay current with confidence.

A green outline of balanced scales with check and cross marks above each side and pink text below that says "Your ethics, our boundaries."

Governance shaped by your values — and if you're B-Corp, ESG, or CSR-focused, we speak your language.

  • Your AI governance should reflect what you stand for. Every organisation has principles — whether that's how you treat customers, how you make decisions, or formalised commitments like B-Corp certification, ESG frameworks, or CSR policies. We take time to understand your values and translate them into AI boundaries that feel authentic. If you already have ethical frameworks in place, we build on them. If you don't, we help you articulate what matters.

Green stopwatch with motion lines indicating speed, and text 'Speed Without Shortcuts' in bold pink letters.

Human Hero, AI Sidekick — governance in weeks, with expertise at every step.

  • We use AI to accelerate research, documentation, and analysis — and every recommendation, policy, and judgement call is shaped by human expertise and understanding of your context. The result: governance delivered faster, with rigour and care built in.