# AI use policy

Concept · [Building with AI](https://ecosystem.samcarlton.com/ai)

Also called: approved tools, approved AI tools, AI policy, acceptable use policy, shadow AI, AI governance

An organization's rules for which AI tools its people may use and what information they may put into them. Some organizations allow only tools they have reviewed and approved.

**For example:** An [employee](https://ecosystem.samcarlton.com/contractor-vs-employee) wants to try a new [coding](https://ecosystem.samcarlton.com/code) tool. The company's policy allows only approved tools, so the employee asks the security team to review it first.

## Connects to (15)

- [Data privacy](https://ecosystem.samcarlton.com/data-privacy): How a company collects, uses, stores and shares information about people.
- [Guardrails](https://ecosystem.samcarlton.com/guardrails): Checks and limits built around a model inside a product.
- [Compliance](https://ecosystem.samcarlton.com/compliance): Meeting the laws, regulations and standards that apply to a company.
- [Terms of service](https://ecosystem.samcarlton.com/terms-of-service): The legal agreement between a service and the people who use it.
- [Change management](https://ecosystem.samcarlton.com/change-management): Planning and supporting the people side of a change, such as a new tool or process, so staff actually adopt it.
- [IRS Section 7216](https://ecosystem.samcarlton.com/irs-section-7216): A US tax rule that limits how tax return preparers may use or disclose clients' tax return information without the client's consent.
- [Data governance](https://ecosystem.samcarlton.com/data-governance): The rules and responsibilities for how an organization's data is collected, stored, used and protected.
- [AI literacy](https://ecosystem.samcarlton.com/ai-literacy): Enough understanding of AI to use it well and safely: what it is good and bad at, how to write a prompt, how to check its work and what…
- [Microsoft 365 Copilot](https://ecosystem.samcarlton.com/microsoft-365-copilot): Microsoft's AI assistant built into its work apps, such as Word, Excel, Outlook and Teams.
- [Pangram](https://ecosystem.samcarlton.com/pangram): A tool that estimates whether a piece of writing was produced by AI.
- [NIST AI Risk Management Framework](https://ecosystem.samcarlton.com/nist-ai-rmf): A voluntary framework from NIST, the US standards agency, that helps organizations manage the risks AI can pose to people, organizations…
- [ForHumanity](https://ecosystem.samcarlton.com/forhumanity): A nonprofit public charity that examines the risks of AI and develops criteria for the independent audit of AI systems, written by…
- [Federal Trade Commission](https://ecosystem.samcarlton.com/ftc): The US federal agency that enforces laws against unfair, deceptive and anticompetitive business practices.
- [OK AI Roundtable](https://ecosystem.samcarlton.com/ok-ai-roundtable): An Oklahoma City group that calls itself Oklahoma's industry-led convener, educator and champion for AI.
- [AI addendum](https://ecosystem.samcarlton.com/ai-addendum): An add-on to a software contract for a product that uses AI.

Map view: https://ecosystem.samcarlton.com/ai-use-policy