AI Usage Policy Template
A comprehensive, AI-positive policy template to guide responsible AI adoption in your organization
What's Inside This Template
Who It's For
CIOs, CHROs, Legal teams, and compliance officers establishing AI governance frameworks
When to Use
Before rolling out ChatGPT Enterprise or other AI tools to your organization
Key Benefit
Establish clear guidelines that encourage AI adoption while protecting sensitive data and intellectual property
Sections Included
- TL;DR summary in plain English
- Purpose and scope definition
- AI-positive philosophy statement
- Encouraged use cases by department
- Data protection and IP guidelines
- Tool selection and approval process
- Best practices for effective AI use
- Training and support resources
- Compliance and monitoring approach
- Policy review and update process
Prefer Google Docs?
Open this template in Google Docs to make a copy and customize it directly
Complete Template Content
NOTE: To use this template, copy the content using the “Copy page” button above, then customize for your organization.
[Company Name] Artificial Intelligence Usage Policy
Version 1.0 | [Date]
TL;DR - Our AI Policy in Plain English
We believe AI tools can make you more effective at your job and help us to win as a company. We encourage you to use them, here’s what you need to know:
We want you to:
- Use AI to make your work better and faster
- Try new AI tools and share what works
- Ask for help if you’re unsure
Just remember to:
- Keep customer and company confidential information private
- Double check AI-generated content before sharing externally
- Use company AI tools for sensitive work
- Share your success stories with colleagues
That’s it! The rest of this document provides more detailed guidance when you need it.
Purpose and Scope
Purpose Overview
This section describes why we have an AI policy and what it aims to achieve. As an AI-positive organisation we want to emphasise that this policy aims to enable and encourage AI adoption while providing clear guidelines for responsible use.
Example text: “[Company name] recognises AI as a transformative technology that can enhance our productivity, creativity and competitive advantage. This policy provides guidelines to help you use AI effectively while protecting our interests. We’ve kept the policy short, but to summarise in one sentence - we will use AI to win”
Scope Definition
Here we’ll define what this policy covers. Include all employees, contractors and potentially partners that interact with company data. Also specify which types of AI tools are covered.
Example text: “This policy applies to all employees, contractors and partners that use AI tools for company-related work, including but not limited to large language models, image generation tools and code assistants. It applies to AI tools and models available at the time of publishing this policy, and any new AI products that may be released in the future”
Our AI Philosophy
This section sets the tone for the entire policy. For AI-positive companies, make a clear statement about embracing AI as a core enabler of business success.
Example text: “We view AI as a powerful tool for complementing human capabilities, not replacing them. We encourage exploration and experimentation with AI tools, believing that early adoption and learning will give us competitive advantage. We seek to become an AI-enabled organisation and will empower and reward employees that build AI capabilities into their work.
Encouraged Uses
Many AI policies focus on what you can’t do with AI. Instead, AI-positive companies should highlight specific ways employees are encouraged to use AI, organised by department or function. Make it clear this list is not exhaustive but illustrative.
Example text for different functions:
| Marketing • Draft and refine marketing copy • Generate and iterate on creative concepts • Educating prospects and customers • Analyse market trends and customer feedback | Sales • Research target accounts • Personalise sales outreach • Negotiation strategy planning • Role playing customer calls |
|---|---|
| R&D • Experiment design and optimisation • Hypothesis generation and testing • Data analysis and visualisation | Engineering • Code assistance and review • Documentation generation • Product mock ups and user feedback • Problem solving and de-bugging |
| Legal • Contract review and analysis • Due diligence support • Regulatory requirement analysis | Finance • Audit support and documentation • Month end closing processes • Data analysis and reconciliation • M&A support |
Data and IP Protection Guidelines
Frame these guidelines as enabling safe innovation rather than restrictive rules. Focus on practical approaches that protect both operational data and intellectual property while maintaining usability.
Remind employees which tools you provide that have appropriate protections in place (such a Team/Enterprise accounts for Claude or ChatGPT)
Example text: “When using AI tools, follow these practical guidelines to protect our information:
For Company Data
- Use approved enterprise AI tools for sensitive data. A full list is included at the end of this document, but specifically use our company [Claude/ChatGPT/Gemini] account rather than a personal account.
- Verify AI outputs before sharing externally - imagine it was provided to you by a junior intern - check, verify, edit before you pass it on as your own work.
- Break down complex tasks to minimize sharing of sensitive information - for example, if you want AI to build you a Python script to merge two customer data csvs, only pass the column headings rather than the full csvs.
- Use generic examples when seeking AI assistance with confidential matters
For Intellectual Property
- Don’t share source code without removing basic business logic
- Use placeholder data when discussing proprietary processes
- Be generic when describing our unique business methods
- Document significant AI contributions to inventions
- Consider locally hosted AI tools for sensitive work
- If you aren’t sure - ask! Get an immediate response in our [Slack|Teams #canidothis channel] or “Can I chat it?” GPT
And for all sensitive information - report any accidental data exposure immediately - let us help you assess and resolve the situation.”
Tool Selection and Approval
Create a streamlined process that enables quick adoption of newly released tools and models while maintaining oversight. Focus on enabling rather than controlling - it is always better that your people use tools within your visibility that outside of it.
Example text: “We maintain a list of pre-approved AI tools for common use cases. If you find a new tool that you’d like to try that is not on the list:
- Submit a brief tool assessment form
- IT will review and respond within 2 business days
- Default is to approve unless specific risks are identified”
Best Practices
Provide practical guidance that helps employees to use AI effectively. You will have a broader change enablement program so this is just to highlight the importance of sharing best practices.
Example text: “To get the best results from AI:
- Be specific in your prompts
- Verify factual outputs (especially when relating to customer data)
- Learn from what works
- Use [ChatGPT Projects/Claude Projects/Gemini Gems] to provide context
- Share successful approaches with colleagues
- Start with small tasks and expand across your team’s processes
- Document effective prompts for reuse”
Training and Support
Use this section to highlight the company’s commitment to helping all employees to succeed with AI.
Example text: “We provide:
- Regular in person and virtual AI skills training
- An AI Ambassadors network in each team
- AI Business Partners aligned to each department
- Weekly Office Hours for AI-related questions
- Internal video/document library of best practices
- Weekly Lunch and Learn sessions in each of our buildings”
Compliance and Monitoring
Keep this brief or it risks putting your teams off discussing their AI usage openly. Focus on enabling safe usage rather than enforcement.
Example text: “We trust our employees to use AI responsibly. Our monitoring focuses on:
- Identifying successful use patterns to share
- Understanding tool effectiveness in our company’s context
- Ensuring appropriate handling of sensitive data
- Supporting teams in using AI effectively
In short, you will be thanked and recognised for using AI - just be sensible and if you aren’t sure - ask”
Review and Updates
Highlight that the world of AI is moving fast and that this policy has to adapt as new tools and models are released.
Example text: “This policy will be reviewed at least quarterly to:
- Include new AI capabilities
- Add successful use cases
- Update best practices
- Remove any outdated restrictions
- Incorporate team feedback
This AI policy is also provided as a [ChatGPT GPT/Claude Project] so if you have any questions about the current policy - ask there for the latest guidance.”
Getting Help
Make it clear and easy for employees to get support. We want this policy to encourage your people to talk about their ideas, their experiments and to get advice.
Example text: “For any AI-related questions or support:
- Contact your department’s AI Business Partner
- Speak with your team’s AI Ambassador
- Visit the AI resource centre on the Intranet
- Join the #ai-help [Slack|Teams channel]
- Attend the next AI Office Hours
- Email ai-help@company.com”
Appendix
Approved Tools
- ChatGPT Business/Enterprise
- Claude Enterprise
- etc
Implementation Notes
When implementing this template:
- Customise the tone and content to match your company culture - we have written this as an encouraging AI-positive policy - if that is not your approach you’ll want to change many of the examples.
- Add specific examples for your industry and company - especially in the encouraged use cases section.
- Update the approved tools section to those you have actually approved
- Consider creating a one pager or infographic for quick reference
- Create a custom GPT or Claude Project with this policy as knowledge for your employees to discuss with
- Link out to any training, list of AI Ambassadors and AI Business Partners and the Office Hours schedule
Remember this is a starting point - you should adapt it based on your:
- Company size and structure
- Geographic location and regulations
- Industry requirements
- Regulatory environment
- Current AI maturity
- Risk tolerance
- Employee technical literacy
How to Use This Template
Copy the template
Use the 'Copy page' button to copy the entire policy as Markdown
Customize for your organization
Replace [Company Name] placeholders and add industry-specific examples
Review with stakeholders
Share with Legal, IT, HR, and department heads for feedback
Publish and communicate
Roll out to employees with training and support resources
Frequently Asked Questions
Common questions about AI policies and responsible AI adoption
Do I need an AI policy before deploying ChatGPT Enterprise?
How is this template different from traditional IT policies?
Should our AI policy be permissive or restrictive?
How often should we update our AI policy?
What's the difference between ChatGPT Free and ChatGPT Enterprise regarding data privacy?
How do we handle employees who want to use AI tools not on our approved list?
Should we monitor AI usage by employees?
Need Help Implementing Your AI Policy?
Our AI governance specialists help enterprises establish comprehensive AI policies, train teams, and manage organizational change for successful ChatGPT Enterprise rollouts.
Talk to an Expert