A one-page AI policy for small business

If more than one person uses AI tools at work, write down the rules. One page is enough.

Template

1. Approved tools. Staff may use: {list your tools and plans}. Other AI tools need approval from {name}.

2. Never paste: passwords, card or bank numbers, ID numbers, health information, other people’s personal data unless the tool is approved for it, confidential contracts.

3. Always check: facts, prices, dates, names and anything sent to a customer. AI drafts are a starting point; the person who sends them is responsible.

4. Not allowed: using AI to make hiring, firing or credit decisions about people; publishing AI-generated images of real people; passing off AI text as professional advice.

5. Customers. Where AI drafts customer messages, a person reads them before they are sent. We say in our privacy policy that we use AI tools.

6. Questions. Ask {name}. This policy is reviewed every six months.

Before you adopt it

  • Check what data settings your tools offer and turn off training where possible.
  • If you are in a regulated field (health, legal, financial), check your regulator’s guidance first.

Questions from readers

Stuck on A one-page AI policy for small business? Ask the geeks.

Ask a question

We can’t reply privately. Useful questions get answered here on the page.

Related AI playbooks