Free one-page AI use policy.

[Company name] AI Use Policy

Effective [date] · Policy owner: [name, role] · Review every [6] months

1. Approved tools

Use only: [tool and plan, for example ChatGPT Business or Claude Team]. Use your company account, never a personal one, for company work.

2. Never enter

• Client or customer personal details (names tied to finances, account numbers, Social Security numbers)
• Patient health information [unless the tool is approved and covered by a BAA]
• Employee HR records, passwords, and access keys
• Contracts, financials, or anything under NDA [unless approved by policy owner]

3. Fine to enter

• Public information
• Company templates and processes that are not confidential
• Your own drafts with names and numbers removed

4. Check everything

A person reads every AI output before it goes to a client, patient, or the public. Check names, numbers, dates, and any legal, tax, or medical claim. You own what you send.

5. Settings

Turn off model training where the tool allows it. Do not share chat links outside the company. Delete chats that contain sensitive details [per our retention rule].

6. Questions and mistakes

Not sure? Ask [name]. Entered something you should not have? Tell [name] the same day. No blame for reporting.

Template by Ninety Minute AI. Practical guidance, not legal or compliance advice. Have your advisor review it for regulated work.