AI Policy Guide
Stop writing AI policies in the wrong order.
Your organization does not need every AI policy at once. Answer a short set of questions about your structure, data, AI use, agents, and current controls. We will show you which policies should move first — and why.
21
questions
~6
minutes
32
candidate policies
6
organization types
What determines your policy priorities?
Organization & Governance
Who owns AI risk and how oversight operates.
Data Footprint
What data exists, who controls it, and where it may travel.
AI & Agent Exposure
Which AI systems can act, access data, or make changes.
Security Posture
What controls already exist and where the gaps remain.
This tool provides governance guidance, not legal advice. Must / Should / Depends classifications reflect governance judgment applied to published sources. Statutory and contractual duties vary. Confirm requirements with appropriate counsel.