Create an AI policy

If your organisation uses AI, have a clear policy that explains how it can be used, who’s responsible and what rules people need to follow.

An AI policy is your organisation’s essential guiding resource for all AI related activities. It helps support safe, consistent and accountable use across your organisation.

A policy gives your organisation a shared set of rules for responsible AI use.

It helps you:

• set expectations for staff and teams
• support consistent decision-making
• show your approach to governance and accountability
• make reviews, audits and assurance easier
• align AI use with legal and industry obligations.

Without clear rules, teams might use AI inconsistently. This creates unnecessary risk.

Our AI policy template gives you a practical structure and examples to get started.

It includes:

• core principles for responsible use
• expected behaviours and internal rules
• roles and responsibilities
• governance and approval points
• guidance for monitoring and review.

The example wording aligns with our essential AI practices.

Use the template as a starting point, then tailor it to fit how your organisation already works.

When updating the policy:

• make sure it reflects your values, goals and legal obligations
• match roles and responsibilities to your existing governance structures
• use terms your team already knows
• test the draft with the people who will use, review or oversee it

This helps make the final version practical and easy to follow.

Before finalising your policy, check that it clearly outlines:

• what AI can and can’t be used for
• who approves higher-risk use cases
• what data staff can put into tools
• when staff need to oversee AI use
• how staff should report issues or misuse
• when the policy will be reviewed.

This helps turn the policy into something people can use in day-to-day work.