Purpose & Scope Statement
Defines what AI systems are covered, who the policy applies to, and its relationship to other governance documents.
Configure your context
AI drafts your output
Review and refine
Download and share
Supported frameworks include: EU AI Act, NIST AI RMF, ISO 42001, GDPR, UK GDPR, CCPA/CPRA, DPDPA, APPI, PIPL, PDPA, LGPD, POPIA
What you get
A single generation produces a complete, structurally sound policy — not a template with gaps to fill, but a referenced document ready for legal review.
Defines what AI systems are covered, who the policy applies to, and its relationship to other governance documents.
EU AI Act and NIST-aligned principles: transparency, accountability, fairness, privacy, safety, human oversight, and sustainability.
Explicit list of approved AI applications and categories of AI use that are prohibited in your organisation.
AI systems tiered by risk level (Unacceptable / High / Limited / Minimal) with applicable controls for each tier.
Named governance responsibilities — from the board down to individual AI users — with clear escalation paths.
Data classification, personal data handling, third-party AI data flows, and retention requirements.
Regulation-specific references woven throughout — not bolted on at the end. Covers your jurisdiction's primary AI and data laws.
When and how to report AI-related incidents, plus scheduled policy review cadence and ownership.
Fill in your organisation details below. The more context you provide, the more precisely tailored your policy will be.
Your generated document will appear here.
Fill in the form and click Generate to begin.
Built with responsible AI principles. Human review is not optional — it's a core part of the process.
Full disclaimer
Not legal advice
This document does not constitute legal advice and must not be relied upon as such. Consult a qualified legal professional before implementing or relying on this document in whole or in part.
Regulation currency
Laws, regulations, and guidance cited are subject to change. Content reflects the position as at the date of generation and may not account for subsequent amendments, enforcement decisions, or judicial interpretations.
Proposed legislation
Where proposed or draft legislation is referenced — including the EU AI Liability Directive — such references describe legislation that has not been enacted. Its final form, scope, timing, and territorial application remain unconfirmed.
AI output limitations
AI output can contain errors or omissions. Do not rely on this document as a complete statement of your legal obligations or as a substitute for specialist compliance advice.
Generate a complete, regulation-referenced AI usage policy in under 2 minutes. No account needed. No commitment.
Generate My Policy