AI policy
A one-page AI policy your team will actually follow
Your staff are already using AI, often on personal accounts. We'll help you write a one-page policy people actually read, approve the right tools, and train the team in an afternoon.
Sound familiar?
- Staff paste client or patient details into free AI tools on personal accounts
- There's no written rule on what's allowed, so everyone guesses
- A client, insurer or regulator has asked what your AI policy is
- You don't want to ban AI — you want it used without risking client data
What changes
One page, not a binder
A short, plain-language policy on what's fine, what needs care and what's off limits — short enough that people follow it.
Approved tools replace workarounds
Business accounts with the right privacy settings, so staff stop needing personal ones.
Everyone trained, quickly
Short, task-based training built around the work your team actually does.
A ready answer
When a client or insurer asks about AI, you hand them the policy and the answer is done.
How we'd approach it
Find out what's really happening
A short, no-blame survey shows which tools staff use and what information goes into them.
Sort your information
We agree together what counts as public, internal, confidential and personal or health information.
Write the one-pager
The policy is drafted in plain language, reviewed with you, and trimmed until it fits on one page.
Train and check in
Staff get practical training on the approved tools, then a follow-up a few weeks later to adjust what isn't working.
What it might look like
Physiotherapy clinic · 15 staff · illustrative
Clear lines around patient information
Front-desk staff keep AI for scheduling messages and general writing, with one firm rule: patient health information stays in the practice system.
Professional firm · 25 staff · illustrative
From personal accounts to approved tools
Staff move to a business plan with data-retention controls, and the one-page policy spells out what client information can never be pasted into an AI tool.
These are illustrative examples of the kind of work involved, not results from specific clients.
What we measure
We agree a baseline before changing anything, then check the same numbers afterwards.
- Personal AI accounts in use for work
- Policy in place and acknowledged by staff
- Staff trained on the approved tools
- Sensitive data flagged or reported
Works with what you have
We work across Microsoft Copilot, Google Gemini, ChatGPT, Claude and the AI features inside industry software. The right tool depends on how sensitive your information is, and we explain the trade-offs in plain language. We don’t earn commission from any AI provider.
Questions
Is this legal advice?
Why not just ban AI tools?
Will staff actually read a policy?
What about client or patient confidentiality?
No policy in place yet?
Start with a short conversation about how your team uses AI today.