AI use policy, data privacy and compliance
Writing an AI use policy
Writing an AI use policy staff follow
- An AI Use Policy for a Small Company
- How to Write an AI Use Policy That Staff Will Actually Follow
- Writing an AI Use Policy That Survives a Real Incident
- How to Version the Policy an AI Agent Enforces
- How to Write an AI Use Policy for Contractors and Agencies
- Writing a Plain-English Consent Notice for an AI Feature
- Writing an Exception Log for AI Use Policy Waivers
Data classification and retention
Data classification and retention rules
- Data Privacy Checklist Before Using AI at Work
- Data Retention and Deletion for AI Tools: What to Ask a Vendor
- A Step Inventory Your Team Keeps Current
- Data Classification for AI Tools: Three Tiers and Their Rules
- How to Run a Deletion Drill for AI Data
- How to Test a Tier Mapping with Synthetic Records
- How to Verify Data Deletion Without a Direct API
- How to Write a Data Retention Schedule for AI Decision Logs
- All of Data classification and retention
Approving AI tools
Approving and registering AI tools
- A Vendor Questionnaire for AI Tools: What to Ask Before You Sign
- Checklists Staff Can Use Before Trusting an AI Answer
- How to Build an Allowlist of AI Tools Staff Will Actually Use
- Seat Allocation for AI Tools: Who Gets Access and Who Waits
- How to Approve a New AI Tool in Under a Week
- How to Build an AI Tool Register Your Team Will Actually Use
- How to Run a Monthly Review of AI Tool Spend and Usage
- Mapping Every AI Tool to an Owner and a Renewal Date
- All of Approving AI tools
Catching unapproved AI use
Catching unapproved AI use
- How to Enforce an AI Use Policy Without Reading Every Chat
- How to Handle an Employee Using an Unapproved AI Tool
- When a Team Buys Its Own AI Tool: Detecting Shadow Licenses
- Detecting Policy Drift: Practice Outruns the Rule
- How to Configure a DLP Proxy to Catch Pasted Customer Data
- How to Detect Unapproved AI Use Without Reading Every Chat
- Reading SSO Logs for Unregistered App Sign-Ins
- When an Employee Wants to Use a Personal AI Account for Work
Handling AI policy incidents
Handling AI policy incidents and leaks
- An Employee Pasted Customer Data into a Chatbot: What Now
- How to Run a Tabletop Exercise for an AI Data Leak
- Metrics for an AI Use Policy: Hit Rate and Time to Close
- Regulated Data Pasted into a Chatbot: A Response Playbook
- What to Capture in a Policy Incident Postmortem
- Writing the Triage Script for an AI Policy Violation