Policies

Manage and template your internal governance policies.

Governance Policies

Generate templates or upload existing policies to map them against your risk controls. This forms the foundation of your EU AI Act compliance.

Template Library

Adopt pre-written templates to support your compliance program. Note: these are templates, not final documents.

Last reviewed for regulatory mapping: April 2026

AI Acceptable Use Policy

Ground rules for employee and contractor use of AI tools.

EU AI ActISO 42001SOC 2

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI Vendor Assessment Policy

Procurement screening and risk tiering for vendors that embed AI.

EU AI ActISO 42001SOC 2

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI Model Risk Management Policy

Risk assessment, validation, and monitoring of AI models in production.

EU AI ActISO 42001NIST AI RMF

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI Incident Response Policy

Triage, containment, and reporting for AI-specific incidents.

EU AI ActISO 42001NIST AI RMFSOC 2

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI Data Governance Policy

Provenance, quality, and lifecycle controls for AI training and inference data.

EU AI ActGDPRISO 42001

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

Generative AI Content Disclosure Policy

When and how AI-generated content must be disclosed internally and externally.

EU AI Act

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI Training Data Provenance Policy

Documentation of training data sources, licensing, and lawful basis.

EU AI ActGDPRISO 42001

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

Employee AI Tool Approval Policy

Intake and approval process for new AI tools requested by staff.

ISO 42001SOC 2

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

Customer-facing AI Disclosure Policy

What we tell customers about the AI inside our product.

EU AI ActGDPR

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI Subprocessor Management Policy

Tracking, disclosing, and auditing AI sub-processors.

GDPRSOC 2

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

High-Risk AI Review Policy

Governance body and cadence for systems classified High-Risk.

EU AI ActISO 42001

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI Bias and Fairness Monitoring Policy

Bias evaluation, monitoring, and remediation expectations.

EU AI ActNIST AI RMFISO 42001

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI System Retirement Policy

Structured decommissioning of AI systems and data.

ISO 42001GDPR

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

AI-generated Code Review Policy

Review standards for code produced with the assistance of AI.

SOC 2

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.

Prompt Injection and Abuse Policy

Controls against prompt injection, jailbreaks, and model abuse.

EU AI ActNIST AI RMF

This template is provided for organizational use and should be reviewed by qualified counsel before adoption.