The firm AI policy, in one page
Oct 12 2026 · Governance
A policy nobody reads protects nobody. Here is a one-page AI-use policy a firm can actually adopt — permitted uses, data tiers, verification and sign-off.
A workable firm AI policy fits on one page: it lists where AI may be used, where it may not (final sign-off, causal claims, identifying data), the three data tiers, the verification routine (label authority vs reasoning, check every citation), disclosure wording, who verifies and signs off, and a review on every model update.
What the one page contains
- Permitted uses
- Prohibited uses
- Data tiers and approved tools
- Verification routine
- Disclosure wording
- Accountability and sign-off
- Review on model updates
Why one page
A policy is only useful if the team knows it. One page, in plain English, that everyone has read beats a fifty-page manual nobody opens. The register and the review are what make it real.
When a client asks ‘who verified this?’, the register answers. When an insurer asks about AI, the policy is the answer.
Written for legal professionals. Not a guarantee of accuracy — always verify every claim against its source, and let a named human sign off. Get the free handbook.