AI Assisted Work
Define acceptable use of AI tools for drafting, analysis, automation, and sensitive data.
Policies
Plain-language standards that define expectations, exception paths, and review ownership.
Policies library
Acceptable Use
Define responsible use of systems, accounts, data, and shared resources.
Access Review
Define how access is reviewed, changed, approved, and removed.
Backup Policy
Set expectations for backup scope, retention, testing, and restoration responsibility.
Change Management
Define when changes require review, approval, notice, or rollback planning.
Data Classification
Define simple levels for data sensitivity and required handling.
Data Retention
Define how long records are kept and when they may be archived or deleted.
Documentation Policy
Set expectations for current, findable, owner-assigned documentation.
Incident Notification
Define who must be notified when incidents affect service, data, obligations, or reputation.
Password and Authentication
Define authentication expectations, MFA use, password handling, and exceptions.
Remote Work
Set expectations for access, devices, communication, security, and availability away from site.
Retention Exception
Define when records may be kept longer or removed sooner than the standard rule.
Third Party Review
Define how vendors, services, and external tools are reviewed before use.
Vendor Access
Set rules for third-party access to systems, data, and support channels.