The core sections
Approved tools and accounts. Data rules: never, with care, and fine. Review rules: what must be checked before it goes to a customer, is published, or affects money or people decisions. Accountability: the person who uses AI owns the result. Transparency: when to tell customers they are dealing with AI. Intellectual property: do not upload confidential third-party material. Reporting: how to flag a mistake or a concern.
Make it usable
Write it in plain language with examples from your own work. Pair it with training so people understand the reasons, not just the rules. Name an owner who updates it as tools change. A policy nobody has read protects no one.
ForceMX's AI School includes a one-page company AI policy tailored to your tools and data.