Skip to main content

Draft Your AI Use Policy in Minutes

A free 8-section template for nonprofits covering permitted uses, data privacy, human oversight, transparency, and review cadence. Claim your account for one free AI-drafted policy with .docx download.

What makes this different

Most AI policy generators produce boilerplate. Ours is scoped for nonprofits and scales from template (free) to AI-drafted (after you claim an account).

Built for Nonprofits

Section language addresses donor data, grant conditions, beneficiary privacy, and board-level governance - not generic corporate boilerplate.

W3C-Aligned Structure

Follows the structure recommended by the W3C AI Working Group, NIST AI RMF, and the IEEE 7000 series - so your policy is ready for funder scrutiny.

Upgrade Path Included

Claim your free account for one AI-drafted policy with .docx download. Upgrade to Starter at any time to regenerate it as your answers change.

What's in your policy

8 sections covering the governance ground every AI policy needs to stand on.

  1. 1
    Purpose and Scope

    Defines which staff, contractors, and tools the policy covers - plus your organization's overall AI stance (cautious, moderate, progressive).

  2. 2
    Permitted Uses

    Lists approved use cases (drafting, summarization, analysis, etc.) scoped to your organization's work.

  3. 3
    Prohibited Uses

    Auto-populated based on your data-handling answers - bans on confidential data submission, misleading output, and unreviewed high-stakes content.

  4. 4
    Data Privacy and Confidentiality

    4-level data classification (Public, Internal, Confidential, Restricted) with explicit rules for each. Addresses donor data, HR records, and grant budgets.

  5. 5
    Human Oversight Requirements

    Mandatory review categories (grant applications, board materials, financial work) plus a review cadence scaled to your review-frequency answer.

  6. 6
    Attribution and Transparency

    When to disclose AI use externally - op-eds, grant applications, research, and internal work product.

  7. 7
    Policy Review Cadence

    Review frequency scaled to the number of AI tools you use (monthly, quarterly, semi-annually, or annually) with a clear change-approval process.

  8. 8
    Contact for Questions

    Designated governance contact for approval requests, incident reports, and amendment proposals. Includes whistleblower protection language.

Legal Disclaimer

This draft AI Use Policy is generated from a template using the answers you provided. It is a starting point, not a legal document. Consult with legal counsel or a qualified AI governance advisor before adopting this as your organization's official policy. Tapp Network provides this tool as-is with no warranty of completeness or legal sufficiency.

Generate your policy - free

No credit card required. Answer 5 short questions - we draft your policy and email it with a claim link to your free TappHQ account.

Prefer to skip the form? Create a free account to generate your policy in your dashboard.

Preview vs. AI-enhanced version

Here's what you get free, and what claiming your account adds.

Free Template (this page)

  • 8-section template policy
  • Conservative-default language
  • HTML attachment emailed to you
  • Legal disclaimer included
  • Static content - no edits

AI-Enhanced (claim your account)

  • One AI-drafted policy via Claude, free
  • Tailored to your answers
  • Read it in your account
  • .docx download to revise in your word processor
  • Regenerating it needs Starter

What an AI use policy is for

An AI use policy is a written answer to a question staff are already asking: which AI tools can I use for work, with what information, and who checks the result? Most nonprofits started using these tools before anyone wrote that answer down. Grant proposals get drafted in a chat assistant, board packets get summarized, donor lists get segmented by a feature inside the CRM. The policy exists so the answer is the same for everyone, in writing, instead of a guess made at 9pm before a deadline.

It is also what a funder or board member asks to see. Some funders now ask grantees how AI touches sensitive data. A board wants to know that a person reviews AI-drafted material before it goes out under the organization's name. A one-page memo that says "use good judgment" answers neither question.

What a policy typically covers

  • Scope. Who the policy applies to (staff, contractors, volunteers) and which tools it means, including AI features inside software the organization already uses.
  • Permitted and prohibited uses. Drafting, summarizing, and analysis are usually permitted. Pasting confidential records into a public tool, presenting AI output as original research, and publishing unreviewed high-stakes content are usually not.
  • Data handling. Which categories of information (public, internal, confidential, restricted) may go into which tools. Donor records, HR files, and grant budgets each get an explicit answer.
  • Human review. Which outputs a person signs off on before use: grant applications, board materials, financial work, and anything sent to a beneficiary.
  • Disclosure. When to say that AI helped produce something, and to whom.
  • Review cadence and a contact. Tools change monthly. The policy says how often it is revisited, who answers questions, and who takes incident reports.

What this generator produces

A first draft with those sections filled in from your answers. It is scaffolding for a board to review and counsel to revise, not a finished legal document. Your free TappHQ account adds one AI-drafted policy that tailors the language to your answers, tool inventory, and governance structure.

Frequently asked questions

Already have a TappHQ account?

Log in and navigate to ComplianceHQ → AI Policy to generate your AI-drafted policy. Free accounts include one generation; regenerating it needs Starter or above.