Glossary Approach & collaboration

AI policy

What is an AI policy?

An AI policy records how an organisation uses AI: which tools are allowed, which data must never go into them, where a person checks and who owns it.

Also known as AI policyAI usage policyAI guideline

A good AI policy for a mid-sized organisation fits on a few pages and is a working agreement, not a legal document. It covers purpose and scope, approved tools, data rules, human oversight, transparency towards clients, AI literacy and ownership.

The policy also helps with the obligations under the AI Act, such as transparency and supporting AI literacy. Start with the tools already in use: a policy that fits how your team works today gets followed.

What belongs in it is covered in our piece on the AI Act for SMBs.

Last updated: 4 October 2026

You can feel it has to change,
we show you how.

You know where the friction is. We help you figure out how AI can genuinely fix it.

Not ready for a conversation yet? Get honest AI advice first →

30 minutes. Online or in Enschede. You decide.