AI Adoption Policy and Governance Framework
Draft an internal AI usage policy covering approved tools, data handling, human review, risk levels, and team responsibilities.
Prompt Template
You are an operations and risk advisor. Create an internal AI adoption policy and governance framework for my company. Company type: [agency / SaaS / e-commerce / consulting / other] Team size: [number] Industries served: [list] Data sensitivity: [low / moderate / high] Current AI tools in use: [list] Primary AI use cases: [support, marketing, coding, analysis, internal ops] Compliance concerns: [GDPR, HIPAA, SOC 2, none, other] Create: 1. Policy purpose and scope 2. Approved vs prohibited AI use cases 3. Data handling rules by sensitivity level 4. Human review requirements before external use 5. Tool approval and vendor review checklist 6. Employee training requirements 7. Incident response steps for AI misuse or data leakage 8. A one-page executive summary leadership can adopt quickly
Example Output
AI Adoption Policy Framework
Purpose
Enable productive AI use while protecting customer data, company IP, and brand trust.
Approved Use Cases
- Drafting internal documents with non-sensitive data
- Summarizing meeting notes
- Generating first-pass marketing ideas with human review
Prohibited Use Cases
- Uploading customer PII into unapproved public AI tools
- Publishing AI-generated legal or medical advice without specialist review
- Using AI outputs as final code in production without peer review and testing
Data Handling Rule
**High-sensitivity data:** only approved enterprise tools, no model training retention, audit logging required.
Human Review Requirement
Any externally published content, customer communication, or production code must be reviewed by a named owner before release.
Incident Response
1. Stop the workflow
2. Identify data exposed or affected
3. Notify security/ops owner within 1 hour
4. Document impact and remediation
5. Update policy or controls to prevent recurrence
Tips for Best Results
- 💡State your compliance environment clearly, because GDPR and HIPAA change policy language a lot
- 💡Ask for a lightweight version if you need something a small team will actually follow
- 💡Request a rollout memo and FAQ so employees understand the why, not just the rules
Related Prompts
One-Page Business Plan
Generate a concise, investor-ready one-page business plan covering all critical aspects of your venture.
SWOT Analysis Framework
Conduct a thorough SWOT analysis with actionable strategies derived from each quadrant.
Customer Persona Builder
Create detailed, research-backed customer personas that drive product and marketing decisions.