Your AI rules on one page
Copy it, change it, pin it where your people work.
- The never list. Passwords and keys, government IDs, health information, your customers’ records, anything under privilege or NDA. None of it goes into any AI tool.
- Named tools, named accounts. Fill in: Tool on company accounts only. Personal accounts are out. To ask for a new tool: Fill in: channel or person.
- A human owns every output. Anything that reaches a client or affects a person is reviewed by someone who can be named.
- Say so. Clients are told when AI use is material.
- An owner, a channel, a version date. Owner: Fill in: name. Questions: Fill in: channel. Exceptions and incidents: Fill in: route. Version: Fill in: date.
These are the five rules the Adoption Diagnostic checks a policy against. No written policy yet? Start here, then read the three things to do before you roll out Claude.
