---
title: "Your AI policy fits on one page"
slug: politica-ia-una-pagina
lang: en
situation: gobernar
format: plantilla
minutes: 30
video: 13
updated: 2026-10-19
---

# Your AI policy fits on one page

> For HR, IT and managers who have to write the policy this week and do not want a forty-page manual nobody reads.

## When to use it

- Your team already uses AI and there is no written rule.
- You were asked for "an AI policy" and the only reference is a long manual from another company.
- There was a scare: data pasted where it should not have been, or AI-written text that reached a client unreviewed.

## The sheet

| # | Point | What to write | Illustrative example |
|---|---|---|---|
| 1 | Approved tools | A short list with the name and what each one is for. | "ChatGPT Team: internal drafting. Copilot: spreadsheets." |
| 2 | What never gets pasted into an AI | Types of information, not technical examples. | "Client personal data, contracts, unpublished prices, proprietary code." |
| 3 | Who reviews what goes to the client | One person or role per type of output. AI does not sign. | "Quotes: the sales manager. Client emails: whoever sends them." |
| 4 | Who you ask when in doubt | A name, not a committee. | "Ana (IT) for tools. Luis (legal) for data." |
| 5 | How often this policy is reviewed | A fixed date and who convenes. | "Every quarter. HR convenes." |

Signed and dated: ____________________ · Next review: ____________

## How to fill it in 30 minutes

1. Bring together one person from IT, one from legal or compliance and two area leads. Thirty minutes, one meeting.
2. Fill points 1 and 2 first. Almost every company already has them in mind; they just need writing down.
3. Spend half the time on point 3. This is the real discussion: who reviews what AI writes for a client.
4. For point 4, write a name. If you write "the AI committee", nobody will ask.
5. Put a review date in point 5 before you leave the room.
6. The most common mistake: trying to make it perfect. It will be imperfect and it will work. A policy that exists protects more than a policy that is still being drafted.

## The line that is almost always missing

Point 3. Companies write which tools are allowed and which data is banned, and forget the output: the quote, the email, the proposal AI helped write and someone sent. AI does not sign. A person signs, and that person has to be named here.

## If this becomes a big decision

If the policy touches an AI purchase or renewal that is hard to reverse and carries your name, the free tools at vicsol.org/decision-clarity/ help you structure it. They do not replace a legal or formal review.

---

Vic Sol · Decision Desk · vicsol.org/resources/ · Free to use with attribution.
This sheet structures a conversation; it is not legal, financial or audit advice.