Glossary Approach & collaboration
AI policy
What is an AI policy?
An AI policy records how an organisation uses AI: which tools are allowed, which data must never go into them, where a person checks and who owns it.
A good AI policy for a mid-sized organisation fits on a few pages and is a working agreement, not a legal document. It covers purpose and scope, approved tools, data rules, human oversight, transparency towards clients, AI literacy and ownership.
The policy also helps with the obligations under the AI Act, such as transparency and supporting AI literacy. Start with the tools already in use: a policy that fits how your team works today gets followed.
What belongs in it is covered in our piece on the AI Act for SMBs.
Last updated: 4 October 2026