Free AI use policy generator
Answer 8 questions and get, in 2 minutes, an AI use policy draft tailored to your company and aligned with the AI Act and the GDPR. Free and editable in Word.
Next step: put it into practice
An approved policy is the start. This is what usually comes next:
Includes the full policy, plus risk classification, AI Act deadlines, systems registry and training deck.
€45 →Acceptable AI Use Policy — full versionA professional policy with annexes, a tool request form and a training record.
€49 →Shadow AI Detection & RegularizationFind out which AI tools your staff already use without approval and how to bring them under control.
€29 →About your company, the AI tools you use, what for and with which data.
It is generated instantly, with your company name and sections based on your answers.
Edit it, add your tools to Annex I and have management approve it.
What your AI use policy includes
- Purpose and scope: who it applies to and why
- Key definitions (AI system, generative AI, approved tool)
- Principles for responsible use
- Permitted tools according to the level of control you choose
- Permitted and prohibited uses (including the Art. 5 prohibited practices)
- High-risk section if you use AI for decisions about people (Annex III)
- Data protection and confidentiality (GDPR)
- Transparency: chatbots, generated content and deepfakes (Art. 50)
- Human verification of outputs
- Training and AI literacy (Art. 4)
- Incident handling and responsibilities
- Annex I: register of approved AI tools
Frequently asked questions
Is an AI use policy mandatory?
The AI Act does not require a document with that name, but it does require every company using AI to promote AI literacy among its staff (Art. 4) and, if it uses high-risk AI, to oversee it and use it according to the instructions (Art. 26). The GDPR also requires you to control what personal data goes into external tools. An approved policy is the simplest way to show you have all this under control.
What does the draft include?
Purpose and scope, definitions, principles, permitted tools according to the level of control you choose, permitted and prohibited uses, data protection rules, transparency, human verification, training, incidents, responsibilities, review and a register of approved tools (Annex I). If you use AI for decisions about people, it adds a specific high-risk section.
Are my answers stored?
No. The draft is generated in your browser. We only receive the data you send us in the download form, as described in our privacy policy.
Does it replace a lawyer?
No. It is a solid draft to start from, which you should review and adapt to your organisation. For high-risk uses or regulated sectors, have a specialist review it.
Informational tool, not legal advice. Law up to date as of October 2026 (includes the Digital Omnibus deadlines).