AI USE POLICY - REVIEW TEMPLATE
Company: [Company name]
Owner: [Named policy owner]
Version and review date: [Date and reviewer]

This is a starting structure, not an operative legal document. Complete and
review every placeholder before adoption. Confirm the actual tools, workflow,
contractual obligations and jurisdiction with the appropriate reviewers.

1. PURPOSE AND SCOPE
Describe which people and workflows this policy covers: [Scope]. Name the
intended use of AI and the work approvals that continue to apply: [Approvals].

2. APPROVED SERVICES AND PLANS
For each approved service, record: exact plan/account, permitted task,
information allowed, training settings, retention/access questions, approving
owner and review date. Register: [Location of current approved-tool register].
An unlisted service or task requires review by: [Responsible person].

3. INFORMATION BOUNDARIES
Allowed examples: [Specific approved examples].
Restricted information: [Personal, confidential, client or other restricted data].
Uncertain cases go to: [Owner and contact route]. Do not infer that removing a
name establishes anonymity or that a no-training setting authorises an upload.

4. OUTPUT REVIEW
Before use, the responsible person checks: [Sources, calculations, audience,
information boundaries and role-specific criteria]. Existing approvals remain:
[Publication, financial, employment and other relevant controls]. Important
work retains this review evidence: [Required record and storage location].

5. HUMAN RESPONSIBILITY
Name who may approve the intended output and which decisions remain with
qualified or authorised people: [Roles and escalation route]. A generated
answer or score does not establish its own accuracy or suitability.

6. QUESTIONS AND MISTAKES
If restricted information is shared or an output creates concern, stop the
relevant activity and use the existing reporting procedure: [Procedure].
Contact: [Responsible team]. Preserve the information that procedure requires;
do not improvise a conflicting incident response.

7. TRAINING AND REVIEW
Use fictional or approved low-risk material for practice. Explain an allowed,
a restricted and an uncertain example. Review this policy when tools, plans,
contracts or workflows change and on: [Review schedule].

ADOPTION CHECK
[ ] Placeholder decisions completed.
[ ] Actual service plans and settings checked.
[ ] Information owners and workflow reviewers consulted.
[ ] Appropriate legal/privacy review completed.
[ ] Staff know where the current policy and reporting route live.