An AI policy that no one reads is paper. A policy that the team co-constructs becomes a criteria. Ethiceye helps companies build the second.
The legal wording and the download by email
No one knows what he says exactly
Filed when a new tool appears
Covers the file
Generates resistance (They control us)
It is built by the team in 5 sessions
Each person can explain it with their words
It has an integrated update protocol
Change how decisions are made
Generates property (We decided this)
What can we use?
ChatGPT Enterprise with DPA: Yes.
ChatGPT Plus Personal: Only for internal drafts without customer data.
With what data?
Customer data Individuals: Prohibited in external tools without DPA.
Non-personal internal data: Approved.
For what and who?
Marketing can use AI for drafts. HR cannot use IA to filter CVS without human supervision.
How is something new approved?
Application to IT → Evaluation in 5 days → Approval or proposed alternative.
Who is reviewing?
No AI-generated content for clients is published without human review.
When is it reviewed?
Semi-annual review. Automatic when there is relevant regulatory change (AI Act, GDPR).
An effective AI usage policy requires three previous steps: Inventory of which AI tools use the equipment, data classification by sensitivity, and map of current uses. Without that diagnosis, any policy will be generic and not used. The Ethiceye process builds the policy with the team, not for the team.
The initial diagnosis can be made in 1–2 weeks. A complete operational policy, in another 3–4 weeks. The time depends on the size of the equipment and the complexity of the use of AI in the organization.
A Compliance Policy is written by the Legal Department and is published. A criteria policy is co-constructed with the team, part of the existing values and generates criteria that the team uses autonomously. The difference is in whether the team can explain politics in their own words.
Every week that passes, your team makes AI decisions without criteria. Building it takes 5 weeks. Call to start, 30 minutes.
