DIGITAL DOWNLOAD · BUILT BY AN AUDITOR · CISA · ISO 27001 LEAD AUDITOR
Your team is already using AI. Set the ground rules in one afternoon.
An editable AI use policy, a one-page rules sheet for staff, a vendor checklist, and simple registers that keep it all current. No lawyer, consultant, or compliance department required.
Instant download · Word, PDF, and Excel files (also open in Google Docs and Sheets) · 14-day refund
Sound familiar?
- Someone on your team pastes customer emails into ChatGPT to draft replies, and nobody has said whether that’s okay.
- An “AI assist” button just appeared in your email, accounting, or design software, and you’re not sure what it does with your data.
- A customer or partner sent a security questionnaire that asks about your AI use.
- You’ve heard about new AI laws and don’t know where to start.
You don’t need a 40-page enterprise policy. You need clear rules your team will actually remember, and a simple way to keep them current.
What’s inside
The guide (17-page editable Word document, plus PDF)
- A complete AI use policy: 12 short sections, with brackets for your details
- “Our 5 AI rules”: a printable one-page version for staff
- A staff sign-off form
- Green / yellow / red information rules, with examples for shops, trades, offices, and wellness businesses
- Seven vendor questions, plus where to find each answer and the red flags to watch for
- Human review levels for common uses, from brainstorming to contracts
- A six-step incident playbook, including a call-back rule for AI-powered payment scams
- Customer disclosure wording for your website, chatbot, email, and recorded calls
- A fully worked example for an 8-person shop, so you can see what “done” looks like
The workbook (Excel, 7 tabs)
- AI tool inventory with overdue-review flags
- Vendor review tracker
- Risk register pre-filled with 12 common small-business AI risks, with suggested controls and automatic High / Medium / Low levels
- Staff sign-off and training tracker that flags who hasn’t signed
- Incident log and a quarterly review checklist
How it works
- One afternoon (3-4 hours): list your AI tools, sort your information, fill in the policy, and print the 5 rules.
- First week: collect staff signatures and check the terms for each tool you use.
- Every quarter (under an hour): run the review checklist. The workbook tells you what’s overdue.
Who it’s for
A good fit: owner-run businesses and small teams (roughly 1-50 people) using everyday AI tools for writing, customer service, and admin, who want sensible protection without a compliance program.
Not the right fit: businesses that need a formal compliance program for a specific law or standard, or that use AI to make decisions about people (hiring, lending, housing). You’ll need qualified legal advice.
Why I built it
I’m Julie Cella. I’ve spent more than 20 years in audit, risk, and quality, most recently auditing technology risk (CISA, ISO 27001 Lead Auditor). Large companies have whole teams for AI governance. Small businesses face many of the same risks with none of that support. This kit is the practical, proportionate version: the controls that matter most, written in plain English.
Questions
Will this make my business compliant?
No template can do that, and you should be wary of any that claims to. The kit gives you a sensible, documented starting point: clear rules, signed acknowledgments, and records showing you follow up. If you’re in a regulated industry, have a qualified professional review your setup.
Do I need technical skills?
No. If you can edit a Word document and type into a spreadsheet, you can use this kit. Every calculation in the workbook is already set up.
Does it work with Google Docs and Google Sheets?
Yes. Upload the files to Google Drive and open them there. Microsoft Word and Excel work too.
Which AI tools does it cover?
All of them. The kit is deliberately tool-neutral, so it stays useful as tools change. It covers standalone assistants, AI features built into software you already use, browser extensions, meeting note-takers, and website chatbots.
Can I use it with my clients?
The standard license covers one business’s internal use. If you’re a consultant or IT provider who’d like to use it with clients, get in touch.
What if it isn’t right for me?
Email me within 14 days of purchase and I’ll refund you.
Can you help me set it up?
You don’t need help to use the kit. If you’d like a second set of eyes on your finished policy, the $99 AI Checkup is available separately.
Not ready to buy?
Start with the free “Use AI Like an Auditor” checklist (PDF): five habits that protect your business, on one page. No email required.
Educational and planning resource only. Not legal, cybersecurity, privacy, or other professional advice. No guarantee of compliance, security, or any particular outcome. Examples are fictional.