Glossary
Updated
An AI-specific AUP defines the rules of the road. It typically specifies which data classifications (e.g., Public vs. Confidential) can be shared with specific models, mandates human review of AI-generated outputs, and requires disclosure when AI is used in customer-facing or legal documents. It acts as the legal basis for internal AI governance enforcement.
Example
A company's AUP states that employees may use AI to draft emails but are strictly prohibited from feeding customer PII or raw financial statements into any tool without explicit DPO approval.