[Company] AI Use Policy
Effective [date]. Applies to all employees and contractors.
This policy is owned by [name].
1. Approved tools
We use these AI tools for company work, on company accounts only: [tools and account types]. Personal accounts are not used for company work. To get a tool added to this list, ask [name].
2. What can go in
Fine to put into approved tools: [examples: drafts, public information, templates, job postings]. Never put in without written approval from [name]: customer personal information, employee records, company financials, passwords or credentials, anything under an NDA, [anything specific to your business]. If you're not sure which list something belongs on, ask before you paste it.
3. Check the output
You are responsible for anything you use or send, whether AI drafted it or not. Before AI output leaves the company: read the whole thing, check every number, name, date and price against the source, and fix what's wrong. These tools state wrong things confidently. Checking is part of the job.
4. Disclosure
[State when, if ever, you tell customers AI was used. For example: "Client-facing work is always reviewed by a person before it goes out, and we say so if asked."]
5. Mistakes
If AI output caused an error that reached a customer or a decision, tell [name] the same day. The point is fixing the process, not blaming the person who caught it.
6. Exceptions
[Name] decides exceptions to this policy, in writing.
Reviewed every [quarter / six months]. Last reviewed [date].