At minimum, four things: which tools are approved, what data can never go into them, who reviews AI output before it leaves the company, and where employees go with questions. The specifics depend on your industry, your client contracts, and the data you hold. Downloaded templates usually fail on the second item — data rules only work when they’re tied to your own classification scheme and your actual obligations. Keep it to one page. If a new hire can’t follow it in week one, it won’t change behavior.
