AI Governance
Short answerIf anyone on your team uses AI tools for work, you need at least a short written policy: which tools are approved, what data may go into them, and who reviews AI-written work. Whether a specific law requires one for your business is a question for your attorney; the practical reason is that clients and insurers increasingly ask.
Most small businesses do not decide to "adopt AI". It arrives: a free chat assistant here, an AI feature inside the email app there, a meeting notetaker someone installed. A policy is not paperwork for its own sake. It is the written answer to a question you are already being asked.
Signs you need one now
A client, insurer or prospect has asked how you use AI. Staff use AI tools on personal accounts. Nobody can say which AI tools are in use. AI-written text goes to clients without a second read.
Any one of these is enough reason to write a page this month.
What a small-business policy needs
Five parts: the list of approved tools, the data that may and may not go into them, who reviews AI-written work before it leaves the business, how to ask for a new tool, and when the policy is reviewed. One or two pages is enough for most teams of 1 to 50.
Start with the list
A policy written before you know what tools are in use either misses the real problem or bans something people depend on. List the tools first, then write the rules around them.
Put this to work today
- List your AI tools, free →
Five questions, about 10 minutes, no account. See where to start and your next three steps.
- AI Use Register Kit ($49) →
List every AI tool your team uses, decide what data can go into each one, and turn those decisions into a short usage policy your staff sign.