AI usage policy template builder
Employees are already using AI at work whether or not there is a policy — the only question is whether the rules are written down. This builder turns a few facts about your organisation into a structured acceptable-use policy that names what is allowed, what is forbidden, how to handle data, and who is accountable. It is a starting template you adapt, not a finished legal document.
How it works
You provide your industry, company size, the types of data employees handle, and your approved tools and overall posture (open, guarded, or restricted). The builder selects and tailors policy sections accordingly: a health or financial organisation handling sensitive personal data gets stricter data-handling clauses and a requirement for enterprise endpoints with data processing agreements, while a low-sensitivity profile gets a lighter framework. The output is plain editable text with bracketed placeholders for your specifics, which you copy and refine.
Tips and notes
Treat the output as a first draft for your legal and compliance teams, not a publish-ready document — obligations vary by jurisdiction (GDPR, CCPA, sector rules) and the template cannot know yours. The most important clauses to get right are data handling (never paste regulated data into consumer tools without a DPA), human review (a person owns every AI-assisted decision), and disclosure (when AI output ships to customers). Pair the policy with the AI risk assessment tool to identify the specific risks your deployments introduce, and revisit the policy whenever you approve a new tool or enter a new market.