Most small businesses already use AI tools, often without anyone deciding the rules. A one-page policy prevents the common mistakes.
The six clauses
- Approved tools: list the AI tools staff may use and the accounts to use them with.
- Confidential data: never paste client data, passwords or unreleased work into tools that train on inputs.
- Human review: a named person checks any AI output before it reaches a client.
- Disclosure: tell clients when AI materially shaped work they paid for.
- Records: note which tool was used for client deliverables.
- Questions: say who to ask when something is unclear.
Keep it short
A policy people read beats a perfect one they ignore. Review it every six months, because tools and rules change quickly.
Comments