Six starter policies, written from your answers.

The AI tools your company has looked at and allows, ideally on business plans with training turned off. Check each one in the AI Tool Register. Example: Microsoft 365 Copilot, ChatGPT Team, Otter.ai.

The categories of information staff must never paste into any AI tool, whatever the plan. Example: customer personal data, health or payment information, passwords and keys, source code, anything under a confidentiality agreement.

The situations where you disclose that AI produced or helped produce something. Laws require it for chatbots and for AI-made images, audio, and video in many places. Example: any customer-facing text, any published image or video, every chatbot conversation.