# Scalable Agile Framework for Execution in AI for Medical AI Ethics Policy Design in Small- and Medium-Sized Enterprises

**Authors:** Ion Nemteanu, Adir Mancebo Jr, Leslie Joe, Ryan Lopez, Patricia Lopez, Warren Woodrich Pettine

PMC · DOI: 10.2196/80028 · Journal of Medical Internet Research · 2026-02-25

## TL;DR

The paper introduces SAFE-AI, a practical framework for integrating ethical AI practices into the workflows of small and medium-sized enterprises.

## Contribution

The novel contribution is the SAFE-AI framework, which integrates ethical oversight into Agile development without requiring extensive governance structures.

## Key findings

- SAFE-AI provides a 4-phase life cycle for embedding ethical safeguards into Agile workflows.
- The framework includes phase-specific checklists and a scenario-based probability analogy mapping method for translating model risk into plain language.
- External stakeholder feedback was incorporated to ensure broader clinical and regulatory relevance.

## Abstract

Artificial intelligence (AI) is transforming patient care, but it also raises ethical questions, such as bias and transparency. While a range of well-established frameworks exist to guide responsible AI practice, most were designed for academic or regulatory settings and can be hard to operationalize within fast-moving, resource-limited small and medium-sized enterprises (SMEs). We report on the collaborative design of the SAFE-AI (Scalable Agile Framework for Execution in AI), an approach that embeds ethical safeguards, including fairness, transparency, responsibility metrics, and continuous monitoring, directly into standard Agile development cycles. In keeping with established Agile principles, SAFE-AI provides “just enough structure” to integrate ethical oversight into existing workflows without prescribing extensive new governance layers. Similar to other Agile frameworks, such as Scrum, which is described as a “lightweight framework” designed to help teams solve complex problems through iterative learning and minimal process overhead, SAFE-AI aims to remain practical for organizations that may not have dedicated ethics or compliance staff. Rather than simplifying technical methods, SAFE-AI simplifies when and how ethical review is triggered and documented, making responsible AI practices feasible even in environments with limited ethics, governance, or compliance resources. SAFE-AI assumes the presence of qualified data scientists and engineers, and it does not replace the need for statistical or technical expertise but instead provides a lightweight structure for coordinating and documenting work that those experts already perform. We followed a design-science, practice-oriented approach over 20 weeks. After a discovery workshop, a cross-functional team was assembled that included SME employees, ethics researchers, and academic partners. The SME’s role was limited to informing design constraints and feasibility considerations during the co-design phase. No operational pilot or production deployment was conducted as part of this study. To reduce the risk of internal design bias and improve generalizability, we also consulted external stakeholders through structured feedback sessions, including clinicians, health care domain experts, and regulatory specialists. Their feedback was incorporated into each prototype-feedback cycle, ensuring that priorities reflected not only the SME’s immediate context but also broader clinical and regulatory perspectives. The co-design process produced a 4-phase SAFE-AI life cycle: discovery, assessment, development, and monitoring. SAFE-AI’s phase-specific checklists meld acceptance, fairness, and transparency metrics into each Agile sprint. A novel scenario-based probability analogy mapping method was added to translate model risk and uncertainty into plain-language narratives for nontechnical stakeholders, forming the framework’s core “responsibility metrics” layer. SAFE-AI is presented as a proposed framework showing that meaningful ethical safeguards can be embedded easily within common workflows used by SMEs that already use basic Agile or iterative development practices. Its checklist-driven phases and automatic review triggers provide a defensible way to track fairness, transparency, and responsibility throughout the model lifecycle.

## Full-text entities

- **Genes:** PDP1 (pyruvate dehydrogenase phosphatase catalytic subunit 1) [NCBI Gene 54704] {aka PDH, PDP, PDPC, PDPC 1, PPM2A, PPM2C}, SHROOM4 (shroom family member 4) [NCBI Gene 57477] {aka MRXSSDS, SHAP, shrm4}, EREG (epiregulin) [NCBI Gene 2069] {aka EPR, ER, Ep}
- **Diseases:** TPLC (MESH:D000091622), SaMD (MESH:D009471), SDLC (MESH:D002658), SMEs (MESH:D015875), sepsis (MESH:D018805), AI (MESH:C538142), ALE (MESH:D004828), SPAMM (MESH:D019292), HHS (MESH:C566870), hallucinations (MESH:D006212), PE (MESH:D007787)
- **Chemicals:** CCPA (-)
- **Species:** Homo sapiens (human, species) [taxon 9606]

## Full text

_Full body text omitted from this summary view._ Fetch the complete paper as Markdown: https://tomesphere.com/paper/PMC12935426/full.md

## Figures

5 figures with captions in the complete paper: https://tomesphere.com/paper/PMC12935426/full.md

## References

51 references — full list in the complete paper: https://tomesphere.com/paper/PMC12935426/full.md

---
Source: https://tomesphere.com/paper/PMC12935426