AI Acceptable-Use Policy Builder

The AI Acceptable-Use Policy Builder turns a guided form into a complete, ready-to-adapt company policy for how staff may use AI. You set the organisation and document control, the scope (employees, contractors, and explicitly whether unapproved "shadow" AI is covered), the regulatory anchors to cite, the approved tools and their data levels, the data that must never be entered, the human-oversight and transparency rules, the AI-literacy training cadence, and the governance and exceptions. The document builds live in a preview beside the form — the same source feeds the on-screen preview, the print/PDF view and the Word export, so what you see is what you ship. Clauses are anchored to the obligations behind them: the EU AI Act (AI literacy under Art. 4, prohibited practices, transparency, oversight), GDPR, and optionally DORA, CSSF Circular 22/806 and Luxembourg professional secrecy. A status stamp (Draft / For review / Approved) marks the document's state. Everything runs in the browser — no account, nothing transmitted — and the policy is yours to export as a styled Word file or a PDF and take into your own review.

• A guided builder across eight sections — org, scope, anchors, tools, data, oversight, training, governance
• A live document preview that is the same source as the print and Word output
• Regulatory anchors cited inline: EU AI Act (incl. Art. 4 AI literacy), GDPR, optionally DORA / CSSF 22/806 / professional secrecy
• Explicit shadow-AI, data-handling and human-oversight clauses, toggled to your choices
• Styled Word (.doc) and PDF export, with document control and an optional status stamp
• A Luxembourg financial-sector preset that adds the sector-specific anchors
• Fully browser-based — nothing you enter leaves the page

The EU AI Act's Article 4 makes AI literacy an obligation, and every organisation now needs a clear line on how staff may and may not use AI tools — including the ones nobody approved. Most teams write this from scratch, and a generic template pulled off the web neither fits the firm nor names the obligations it is supposed to satisfy. This builder produces a policy that is specific and anchored: it reflects your scope, tools and data rules, cites the EU AI Act, GDPR and (for Luxembourg financial firms) DORA, CSSF 22/806 and professional secrecy, and hands you a formatted Word document or PDF to review and adopt — assembled in minutes, in the browser, with nothing transmitted.