A one-page AI policy beats no policy

Tell your team which tools are approved, what data never goes in, and when a human must check. Then encourage them to use it.

Most staff are already using AI, with or without permission. A short policy turns hidden risk into managed advantage. Cover:

  1. Approved tools and accounts (company accounts, not personal ones, for work data).
  2. Red data that never goes into AI tools: passwords, client confidential information, payroll, health data, unannounced results.
  3. Human review before anything is sent externally, published, or used to decide about a person.
  4. Disclosure: say when content or images are AI-generated where it matters.
  5. Owner: who to ask, and how to propose a new tool.

AWS's 2026 Malaysia study found only 30% of businesses have clearly defined accountability for AI and 18% have documented escalation processes, so even a simple owner and escalation line puts you ahead. AI Malaysia's voluntary AI Code of Ethics (AICE) and Boardroom Primer are good free references, and the Draft a simple policy prompt in our library writes the first version for you.

Sources

Learn it hands on, with us.

Free AI build nights in Kuala Lumpur. Bring one real problem and leave with a working tool.

Sign up for next gathering