AI Acceptable Use Policy Template: What Your Staff Actually Need to Know

Written by a CBAP · November 8, 2026

Your staff are probably using AI tools already, whether or not anyone has said they can. The question for most organisations is no longer whether to allow it. It is whether people know where the lines are. A short, clear policy answers that. A long, vague one gets signed and forgotten.

Here is what to look for in an AI acceptable use policy template, and what to do with it once you have one.

1. It should say which tools are approved

Staff need a straight answer. Name the tools that are approved, explain how to request a new one, and say what happens to tools nobody has reviewed. Without this, every person makes their own call, and you will not know what is in use.

2. It should be specific about data

This is the part that matters most. Spell out what must never go into a public AI tool: customer details, employee records, financial information, passwords and anything confidential. General wording such as "use good judgement" leaves too much room. Examples work better than principles.

3. It should keep a person responsible

AI output can be confidently wrong. A good policy says that the person using the tool owns the result, must check it before it is used, and must not rely on AI alone for decisions about people. That one rule prevents most of the problems organisations worry about.

4. You need a way to assess new tools

New AI features appear inside software you already pay for, often without an announcement. A simple risk assessment form gives you a consistent way to ask what data the tool sees, where that data goes and who is accountable before anyone switches it on.

5. Staff need something shorter than the policy

Few people will reread a multi-page policy when they are in the middle of a task. A one-page guide with clear do and do not lists, plus one person to ask, is what actually gets used. A useful test for staff: before entering anything into an AI tool, ask whether you would be comfortable if it became public. If not, do not enter it.

6. How to roll it out

Pick one owner. Fill in your approved tools and your contacts. Have your own professional adviser review the final wording. Then walk teams through the one-page guide in a short meeting, collect acknowledgements and set a date to review the policy, because the tools will change before the year is out.

7. Who this is for

The AI Policy Template suits HR leads, operations managers and small business owners who need something in place soon and would rather adapt a structure than start from nothing. It includes an Acceptable Use of AI Policy, an AI tool risk assessment, a one-page employee quick guide, a notice of AI use in employment decisions and an AI decision records log, each editable and each with a step-by-step usage guide.

It is not the right purchase if your organisation already has a mature AI governance programme. In that case you need a specialist review, not a starting template.