Starter AI use policy template

A plain first draft to adapt to your business. Have a qualified lawyer review it before you adopt it.

AI use policy: starter draft for [your business]
Have a qualified lawyer review this draft before you adopt it.

1. Purpose
This policy sets out how our people may use artificial intelligence tools at work.

2. Approved tools
Use only the AI tools on our approved list. [Name who keeps the list.]

3. Information you must not enter
Don't enter personal information, client confidential information, passwords or financial account details into an AI tool unless that tool is approved for that information.

4. Human review
A person must review AI output before it's sent to a customer or used in a decision about a person. [Name which decisions need a recorded sign-off.]

5. Being open with people
Tell people when required by law, or when it would matter to them, that AI is used in a process affecting them. [Have counsel confirm your obligations.]

6. Vendors
Before approving a tool, check where it stores data, whether it trains on our data, and what the contract says about security and deletion.

7. Accountability
[Name the accountable person] owns this policy, keeps a record of approved AI uses, and handles questions and incidents.

8. Reporting problems
Report wrong, harmful or exposed information from an AI tool to [contact] right away.

9. Review
We review this policy at least once a year, and whenever the law or our tools change. Last reviewed: [date].