AI use policy starter
This starter structure helps organizations write a practical internal policy for AI use. It should be adapted to legal, regulatory, sector-specific, and operational requirements.
Suggested policy sections
- Purpose. Explain why the policy exists and what kinds of AI tools it covers.
- Approved uses. Define low-risk tasks where AI assistance is acceptable.
- Restricted uses. Identify tasks that require approval or should not use AI support.
- Data handling. Describe what information may not be entered into AI systems.
- Review and verification. Define who checks AI-assisted outputs and how evidence is verified.
- Disclosure. State when AI involvement should be disclosed internally or externally.
- Recordkeeping. Identify when tool use, prompts, reviewers, or final decisions should be recorded.
- Review cycle. Set a schedule for updating the policy.
A useful AI policy should be short enough to follow and specific enough to change behavior.