Co-brand this document:

AI Usage Policy

Compliance

Customise the [bracketed fields] before adopting as your firm’s policy.

1. Purpose

This policy sets out how team members at [Firm Name] may use artificial intelligence (AI) tools — including large language models (LLMs) such as Claude and ChatGPT — in their day-to-day work. It ensures AI is used responsibly, professionally, and in a way that protects our clients, tenants, and our firm.

2. Scope

This policy applies to all team members, contractors, and representatives of [Firm Name] who use AI tools in connection with their role.

3. Approved Tools

The following tools are approved for use under this policy:

Any other AI tool must be approved by [Manager/IT/Compliance] before use.

4. Acceptable Use

AI tools may be used for:

5. Prohibited Uses

AI tools must not be used to:

6. Data Handling

When using AI tools, team members must:

Note: Check the data privacy settings of each approved tool. Claude and ChatGPT both offer options to disable training on your data. Enable these where available.

7. Human Review Requirements

The following AI outputs must always be reviewed by a human before use:

8. Mandatory Escalation Triggers

AI must not be the sole basis for decisions in the following situations — escalate to [Manager] before proceeding:

9. Team Responsibilities

RoleResponsibility
All team membersFollow this policy; report concerns to their manager
[Manager role]Approve new AI tools; review incidents; update approved tools list
[IT/Compliance role]Ensure data privacy settings are configured correctly on all approved tools

10. Policy Review

This policy will be reviewed by [Manager] every [6/12] months, or sooner if a significant change in AI capability or regulation requires it. Last reviewed: [Date].

Legal disclaimer: This policy template is provided as a starting point. It does not constitute legal advice. [Firm Name] should seek independent legal review before adopting as a binding policy document.