Last updated:
A set of rules applied by an organization that outlines the permitted and prohibited ways employees may interact with company-provided AI tools.
An AI-specific AUP defines the rules of the road. It typically specifies which data classifications (e.g., Public vs. Confidential) can be shared with specific models, mandates human review of AI-generated outputs, and requires disclosure when AI is used in customer-facing or legal documents. It acts as the legal basis for internal AI governance enforcement.
Real world example:
A company's AUP states that employees may use AI to draft emails but are strictly prohibited from feeding customer PII or raw financial statements into any tool without explicit DPO approval.
