Free template

Free AI acceptable use policy template for your team

An AI acceptable use policy tells employees which AI tools they may use, what data they must never paste into them, and when AI output needs a human check. This free AI acceptable use policy template covers approved tools, data rules, disclosure, review and enforcement, with an approved-tools register and a one-page summary to share with staff.

Written by Intelogos. Last updated .

This is general information, not legal advice. Laws vary by location and change often; consult your own counsel before acting on it.

AI Acceptable Use Policy

[Company] · Effective [Effective date] · Version [Version]

Template
  1. Purpose

  2. Scope

  3. Definitions

  4. Approved AI tools

  5. Information you must never enter

  6. Disclosure

  7. Human review

  8. Intellectual property and confidentiality

  9. Monitoring and enforcement

  10. Training and support

  11. Review schedule

  12. Questions and acknowledgment

Fields in square brackets: [Company], [Register owner], [Approver], [Policy owner]

Illustration of the AI acceptable use policy template's three main documents, with sample entries. Pick a page to pin it; the stack moves on its own until you do.

The policy template

What should an AI acceptable use policy include?

An AI acceptable use policy should cover eight things: who and which tools it covers, which tools are approved, the data that must never go into them, when to disclose AI use, when a person must review the output, intellectual property and confidentiality, how the rules are enforced, and when the policy is reviewed. The template has a clause for each, plus purpose, definitions, training and an acknowledgment.

  1. 1. Scope

    Who is covered, including contractors, and which tools: chatbots such as ChatGPT, Claude, Gemini or Copilot, coding assistants, notetakers, browser extensions and AI features inside software you already use, on company or personal accounts used for work.

    Clause 2 of 12

    • [Company]
    • [contractors, temporary staff and interns]
  2. 2. Approved tools

    Only the tools in the approved AI tools register, for the listed uses and data, through company accounts. A request route with a response time, and a review before new AI features in existing software touch company data.

    Clause 4 of 12

    • [Register owner]
    • [request channel]
    • [Number]
  3. 3. Prohibited data

    Four data classes, from public to restricted, with the rule for each. Personal data, credentials, health, financial account and ID numbers and privileged legal material never go into an AI tool without written approval.

    Clause 5 of 12

    • [Approver]
    • [Security contact]
  4. 4. Disclosure

    When to say AI was used: a substantial part of shared work, always in the content you list, and before a notetaker records a meeting. No passing off AI output as a person's opinion, and no imitating a real person.

    Clause 6 of 12

    • [Disclosure list]
  5. 5. Human review

    A person checks output before it is published, sent or merged, and makes every decision about hiring, pay, performance, discipline or termination, checking the AI output against the underlying data.

    Clause 7 of 12

    • [Review points]
    • [For employees in California]
  6. 6. IP and confidentiality

    Confidential information stays confidential, only material you may share goes in, output is checked for copied material, and ownership follows your IP terms, with a note on copyright in AI output.

    Clause 8 of 12

    • [Confidentiality agreement or policy]
    • [Legal contact]
  7. 7. Enforcement

    How you find out which AI tools are in use, described in the same words as your monitoring notice. A conversation and an approved alternative come first; the disciplinary policy applies after the person can respond.

    Clause 9 of 12

    • [Discovery methods]
    • [Disciplinary policy]
  8. 8. Review schedule

    Review the policy every six months or at least once a year, sooner after a new tool, a new law or an incident. Every tool in the register has its own review date, and changes are announced in advance.

    Clause 11 of 12

    • [Policy owner]
    • [every six months / at least once a year]

From the template

What does the AI policy template say?

Three short excerpts from the policy, as they appear in the download. Square brackets mark the fields you replace. The approved AI tools register does the work behind clause 4, and its Data allowed drop-down uses the data classes from clause 5.

Clause 4 of 12

Approved AI tools

Use only AI tools that the approved AI tools register lists as Approved or Approved with conditions, for the uses and data listed there, and sign in with the account the register names. Do not use a personal account for [Company] work.

To ask for a new tool or a new use, send a request through [request channel]. [Register owner] answers within [Number] business days, after checking the vendor's terms, whether prompts are used to train models and whether that can be turned off, where data is stored and for how long, who can access it, and the cost.

Clause 5 of 12

Information you must never enter

Restricted information never goes into an AI tool unless [Approver] approves a specific tool and use in writing.

Restricted: Personal data about employees, applicants or customers; health information; financial account and government ID numbers; passwords, API keys and other credentials; privileged legal material; [Other regulated data]

When you are unsure of the class, treat the information as the higher class, remove names and identifying details, or ask [Contact].

Clause 7 of 12

Human review

Decisions about people are made by people. No decision about hiring, pay, performance, promotion, discipline or termination is made by an AI tool alone. The person who decides checks the AI output against the underlying data and other information, such as supervisory evaluations, personnel files, work product or peer reviews, and does not use output that is inaccurate, incomplete or misleading.

Do not use AI tools to infer anyone's emotional state or protected characteristics, such as race, religion, sex, age or disability.

Enforcement

How do you enforce an AI acceptable use policy?

You enforce an AI acceptable use policy with three things: visibility into which AI tools people actually use, training so everyone knows the rules, and approved alternatives good enough that nobody needs a workaround. Discipline is the last step, after a conversation, as clause 9 of the template sets out.

  • Visibility into which tools are used

    You can't enforce a list of approved tools without knowing which tools are in use. Check by team every month or quarter, and treat each unapproved tool as a request nobody has answered yet: approve it, offer an alternative, or explain why not. Software inventories, single sign-on and expense records, network logs, and app and website analytics each show part of the picture.

  • Training people on the rules

    A rule people have never seen doesn't change what they do. Train everyone at rollout and once a year with examples from their own work, such as what to do before pasting a customer list into a chatbot, and make training a condition of using AI tools for work, as clause 10 of the template does.

  • Approved alternatives

    If the approved tool is worse than a free one, people have a reason to reach for the free one on a personal account. Approve a capable tool for each common use through company accounts, answer requests within a set number of business days, and say what to use instead whenever you turn a tool down.

Finding the AI tools nobody approved is a job of its own. Our guide to shadow AI covers what it is, how to find it and a 30-day plan to bring it under the policy.

Where Intelogos fits: seeing which AI tools each team uses

Intelogos is a workforce analytics platform that shows how work time is spent across apps and websites, without screenshots or keystroke logging, and lets managers ask questions about it in plain language.

It records the AI apps and websites people use like any other tool and groups them in a built-in AI time category for AI tools and assistants. On the Tools page, filter to the AI category and to a department to see which AI tools that department uses and for how long, then compare the list with your approved AI tools register. The same category appears in the Time Categories chart and table on the Dashboard and Profile pages.

Intelogos doesn't take screenshots. Intelogos doesn't record what people type; it records only whether keyboard or mouse input happened.

Read how time categories and the Tools page work in the help center.

Tools

Last 30 days
Time category: AIDepartment: MarketingSearch by name...
ToolTimeActivityTime category
ChatGPT46h 10m82%AI
Claude21h 35m76%AI
Gemini9h 50m54%AI
Copilot7h 15m47%AI
Illustration of the Intelogos Tools page filtered to the AI time category and one department, with sample data.

California

How does California SB 947 affect your AI policy?

From July 1, 2027, California's SB 947 bars employers from relying solely on an automated decision system for a disciplinary or termination decision, and when a decision relies primarily on one, a person must corroborate it. An AI acceptable use policy is where you write that review step down for everyone who uses AI at work.

What SB 947 requires

SB 947 (Chapter 859, Statutes of 2026) adds Labor Code sections 1520 to 1526.7. An ADS is a computational process derived from machine learning, statistical modeling, data analytics or artificial intelligence that issues a simplified output, such as a score, classification or recommendation, used to assist or replace human discretionary decision-making.

  1. 1

    No sole reliance. An employer may not rely solely on an automated decision system (ADS) when making a disciplinary or termination decision.

  2. 2

    Human corroboration. If the decision relies primarily on ADS output, a person must corroborate it with the underlying data or other information, such as supervisory evaluations, personnel files, work product or peer reviews. Output that can't be corroborated, or that the reviewer finds inaccurate, incomplete or misleading, can't be used.

  3. 3

    Data access. The employee may request a meaningful, objective description of their own data the ADS used.

  4. 4

    Written post-use notice. When the employer announces the decision, it must give a written, stand-alone, plain-language notice saying that it primarily relied on an ADS, that a person reviewed and corroborated the output, who to contact, and that retaliation is prohibited.

It also bars using an ADS to infer an employee's protected status. The civil penalty is $500 per violation, enforced by the Labor Commissioner or a public prosecutor.

Where the template covers it

SB 947 doesn't require a written AI policy as such; its duties attach to how discipline and termination decisions are made. A policy is the practical place to make that process the rule for every manager.

Clause 7 of the template says a person makes every decision about hiring, pay, performance, promotion, discipline or termination, checks the AI output against the underlying data and other information, and doesn't use output that is inaccurate, incomplete or misleading. It also rules out using AI to infer anyone's emotional state or protected characteristics, and an optional California note lists the SB 947 steps for counsel to confirm.

AB 1883, signed the same day, takes effect January 1, 2027 and bars workplace surveillance tools that use artificial intelligence to infer an employee's emotional state or to collect neural data.

Read the guide to California AB 1883, AB 1331 and SB 947

The bill texts are linked in the Sources at the end of the page. See also the employee monitoring policy template and consent form for the notice side of monitoring.

Download

Download the AI acceptable use policy template

A Word document with the policy, the one-page summary and the rollout email, the same documents as a Markdown file, and the approved AI tools register as an Excel workbook. The Word file also opens in Google Docs and the workbook in Google Sheets. Enter a work email and your company size and the files appear right here.

What's inside

  1. 1. AI acceptable use policy (Word and Markdown)

    Twelve clauses with placeholders in square brackets: purpose, scope, definitions, approved tools, information you must never enter, disclosure, human review, IP and confidentiality, enforcement, training, review schedule and an acknowledgment.

  2. 2. Approved AI tools register (Excel)

    Tool, vendor, account, approved use, data allowed, data prohibited, owner, review date and status, with drop-down lists, a frozen header, a tool request log and five example rows to replace.

  3. 3. One-page summary for employees (Word and Markdown)

    The rules on one page: which tools to use, what never goes into an AI tool, what to always do, and who to tell when something goes wrong.

  4. 4. Rollout email (Word and Markdown)

    The announcement to send before the effective date, including how you keep the approved list current and what to do about tools already in use, plus a short reminder.

Get the editable files

A work email and your company size. No name, no call.

We store your email with the download request. See our privacy policy.

This is general information, not legal advice. Laws vary by location and change often; consult your own counsel before acting on it.

FAQs

Frequently asked questions

Generative AI policies, bans, data rules, signatures, reviews, California SB 947 and what Intelogos records.

This is general information, not legal advice. Laws vary by location and change often; consult your own counsel before acting on it.

Sources

The bill texts and official pages that this page and the template rely on, read on the date shown, and the help center pages behind the product statements. Laws change; have counsel confirm each one before you rely on it. Checked October 23, 2026.

Understand your team.
Drive better results.

G2
4.9+ review average

Join thousands of teams already using Intelogos to unlock their full potential with AI-powered workforce analytics.

No credit card required

Start your free trial

Get full access to all features for 7 days. Set up in minutes, see results next day.

  • Unlimited team members
  • All analytics plan features
  • AI-generated insights
Start 7-Day Free Trial
Personalized walkthrough

Schedule a demo

See how Intelogos can transform your organization. Get a tailored demo for your specific needs.

  • Custom implementation plan
  • Enterprise features overview
  • ROI analysis for your team
Talk to our team