Your company: AI use policy
01Why we have this policy
AI tools can save us hours each week. They can also send company and client data somewhere we cannot get it back.
This policy says how everyone at Your company uses AI safely. It covers staff, contractors and anyone working for us.
The short version: use AI for work, and keep company and client data out of it.
02The AI tools you may use
You may use these for Your company work: ChatGPT and Microsoft Copilot.
They are fine for drafting, summarising, research and ideas.
Ask your manager before you use any other AI tool. That includes browser add-ons and AI inside other apps.
03Never put these into an AI tool
Never paste, type or upload any of these into an AI tool, even an approved one:
- Client and customer details, such as names with addresses, phone numbers or dates of birth
- Staff records, payroll and HR matters
- Bank details, card numbers and account numbers
- Passwords, PINs, security codes and secret keys
- Confidential company documents, such as contracts, pricing and plans
- Lists of customers, clients or suppliers
- ID documents, National Insurance numbers and passport numbers
Not sure? Ask your manager first, or take the detail out.
You can still get help. Write "the client" instead of a name, and use made-up numbers.
Personal data is protected by UK GDPR. Putting it into an AI tool can be a data breach.
04Check every answer
AI can be wrong, and it can sound sure when it is.
Check facts, figures, names and dates before you use them.
Read anything AI wrote before it goes to a client. What you send is still your work.
Do not let AI make decisions about people, such as hiring, pay or performance.
05Use company accounts, not personal ones
Use only the AI accounts Your company gives you. Never use a personal AI account for work.
This applies on your own phone or computer too.
Where a tool allows it, Your company turns off the setting that lets the provider train on our data.
06If something goes wrong
If you put something into an AI tool that you should not have, tell your manager straight away.
Say what it was, which tool, and when. Telling us quickly matters most.
Some mistakes with personal data must be reported to the ICO within 72 hours.
07Keeping this policy up to date
Your manager reviews this policy every 12 months, and whenever we add a new AI tool.
Next review: October 2027.
Questions? Ask your manager.
08Your agreement
I have read the Your company AI use policy and I will follow it.