An AI usage policy is an internal document that sets the rules: authorized tools, data prohibited in tools, the obligation to review, transparency, responsibilities, and conduct in case of an incident. Short and concrete, it is communicated and enforced.
Example
Prohibited: entering customer data into an unapproved tool.