AI Governance Audit KitFree AI policy generator
Answer 12 questions. You'll get two policies written for your organisation: an AI acceptable use policy for staff, and an AI agent policy covering owners, permissions, human approval, logging and a kill switch. Edit them here, then download for Word.
Nothing you type leaves your browser. A starting point that supports your compliance work, not legal advice.
Your AI acceptable use policy
Your AI agent policy
What the policies cover
AI acceptable use policy
- Which AI tools are approved and who approves new ones
- What must never be entered into an AI tool, based on the data you handle
- Checking AI output, decisions about people and AI that customers see
- Meeting recorders, software that calls AI, and AI literacy training
- Inventory, monitoring and reporting problems
AI agent policy
- A register and a named owner for every agent
- Its own identity and least-privilege permissions
- Human approval for actions that send, pay, delete or change access, with your spend limit
- Untrusted content, logging, a tested kill switch and testing before go-live
- Vendor terms and incidents
See the full example text: AI acceptable use policy template and AI agent policy template.
Questions
Is what I type saved or sent anywhere?
No. The policies are written in this page from your answers. The page blocks every outgoing request, and nothing is stored after you close the tab.
Is this legal advice?
No. It's a starting point that supports your compliance work. Adapt it to your organisation and the laws that apply to you, and have it reviewed where it matters.
What does the AI agent policy cover?
A register and a named owner for every agent, its own identity with least-privilege permissions, human approval for actions that send, pay, delete or change access, treating fetched content as untrusted, logging, a tested kill switch, testing before go-live, vendor terms and incidents.
Can I edit the result?
Yes. Both policies appear in editable boxes. Change anything, then download for Word or as plain text.