An AI policy template for an ISO 42001 AI management system, with a second, practical AI use policy for organisations that simply want rules for using AI tools.
This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Policy number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested policy templates. No junk, jargon or unnecessary content. Simple and usable policy templates
developed over 25 years through practical use in the real world.
Further guidance on AI management:
Download this policy template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This policy is also included in the ISO 42001 Toolkit and every alphaZ ISO toolkit that covers ISO 42001, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like this policy prepared for your organisation along with the rest of your company policies, or help preparing your AI policy and AI risk register, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Artificial Intelligence Policy Template
An artificial intelligence policy template committing to use, provide or develop AI responsibly, securely and ethically, in ways that suit the organisation's purpose and context and the needs and expectations of its interested parties.
The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.
What the AI Policy Covers
- Requirements - meeting the legal, contractual and other requirements that apply to the use of AI
- Improvement - continually improving the AI management system
- Risk and impact - assessed before an AI system is introduced or significantly changed
- Human oversight - AI outputs checked by a competent person, and AI not used where a human response is required or preferred
- Personal and confidential information - used with AI only after risks are assessed and safeguards are in place
- Fair, transparent and secure use - AI systems monitored and withdrawn when no longer suitable
- Workers - aware of the rules on acceptable use and reporting concerns
- Responsibility and objectives - top management responsible, and AI objectives set annually at management review
- Communication - shared with workers and available to interested parties on request
Two Versions Supplied
The main policy is written as the AI policy for an ISO 42001 AI management system. P-120 Artificial Intelligence Policy (V2) is a practical AI use policy for organisations without an AI management system, covering how AI may be used, the rules for using it, managing AI risks, and responsibilities and training.
Using the Policy
Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.
Who Needs an AI Policy?
Any organisation whose workers use AI tools, and organisations working to ISO 42001.
Included in the ISO 42001 Toolkit
This policy is part of the ISO 42001 Toolkit and every alphaZ ISO toolkit that covers ISO 42001.
Works with the AI Risk Register
AI tools, risks and controls can be recorded on the ER42 AI Risks and Controls Register, impacts assessed on the F-AI3 AI Impact Assessment, and the RA-BR12 Use of Artificial Intelligence risk assessment covers the risks of AI use.
Document Control
The footer carries the policy number and title, information classification, version and page numbers, and the approval fields record who approved the policy and when, so it can be controlled with the rest of your management system documents and listed on a document register such as the F-IMS20 Document Register.
Related Policies
Would you rather we prepared it for you?
Our AI Policy and Risk Register service records your AI tools, the risks and controls against each, and what AI may not do, with your AI policy prepared to match.
AI Policy and Risk Register