The AI Use Policy Kit takes a small business from "no policy" to rolled-out-and-acknowledged in 30 days — about 4 hours of total work. Eight editable documents. No legalese walls. No $10k consultant engagement.
Get the kit See a free sampleIndustry surveys in 2026 report that roughly two-thirds of employees use AI tools at work while fewer than one in five companies has a formal AI policy — and over a third of employees admit to pasting sensitive data into AI tools.* Meanwhile, cyber-insurance questionnaires, client security reviews, and vendor assessments now routinely ask: "Do you have a written AI use policy?"
*Sources: published 2026 industry surveys; figures are directional and vary by study. Links in the kit's research appendix.
| Document | What it does | Time to customize |
|---|---|---|
| AI Acceptable Use Policy | The core, sign-off-ready policy: approved tools, data rules, human-review rules | 45 min |
| AI Tool Approval Workflow | Request → review → approve in 5 days, with a tools register and data tiers | 20 min |
| Vendor AI Assessment Checklist | Vet any AI tool in under an hour (training, retention, DPA, SOC 2) | use as-is |
| Employee Quick-Start One-Pager | The do/don't sheet your team will actually read | 10 min |
| AI Incident Response Procedure | Exactly what to do when data goes where it shouldn't | 20 min |
| Client-Facing AI Disclosure | Website statement, questionnaire answer, and contract clause starting point | 20 min |
| AI Risk Register (.xlsx) | Pre-filled with 15 common SMB AI risks, scored and mapped to mitigations | 30 min |
| 30-Day Implementation Guide | Week-by-week rollout plan with announcement email — this runs the show | it runs itself |
Every document is editable (.docx / .xlsx), with bracketed fields marking each spot that needs your input. The posture is enable, not block: approve good tools fast, protect the data that matters.
Checkout via Gumroad (handles VAT/sales tax globally). 14-day refund if it's not what you expected — email us, no hoops.
Practical, no-signup guides on rolling out an AI policy: