What the policy covers
- Approved tools
- Staff training
- Data rules
- Reviewed yearly
What it does
Approved tools
A clear list of the AI tools your firm allows, and how each one should be signed in to and used.
Data that never goes in
Plain rules on client details, personal data and confidential documents, so nobody has to guess.
Short, practical training
Sessions built around real tasks in your firm, showing good use and the mistakes to avoid.
How it works
An AI policy and training is a one-off project. We start with how your team uses AI today, then agree rules that fit your firm and your clients' expectations.
We find out what is in use
We talk to your team and check which AI tools people already use, so the policy reflects real habits.
We draft the policy with you
A short document covering approved tools, data that must never go in, checking AI output and who to ask.
We set the controls to match
Where Microsoft 365 allows it, we make the approved tools easy to reach and unapproved ones harder to use.
We train your team
Practical sessions with examples from your work, and a one-page summary staff can keep to hand.
Why it matters for legal, financial services and insurance firms
Law firms
Client confidentiality and privilege come first. A policy makes it clear that client details never go into unapproved tools, and that AI drafts are checked by a person. IT for law firms
Financial services
Firms need to show how customer data is handled. A written policy and training records help you answer questions from clients and auditors. IT for financial services
Insurance
Claims and policyholder details are personal data. Clear rules stop them being pasted into tools that have not been approved. IT for insurance
Other AI and automation services
Getting ready for Microsoft Copilot
Permissions tidied, sensitivity labels in place and a pilot group, before Copilot goes to everyone.
Workflow automation
Intake forms, onboarding checklists, approvals and reminders, built with Microsoft 365 tools.
Safe use of AI assistants
Practical rules and settings for using Microsoft Copilot and Claude on everyday work.
All AI and automation services
The full range of AI and automation services, and how they fit together.
Frequently asked questions
Is this the same as security awareness training?
No. Security awareness training covers phishing and safe working in general. This training is about using AI tools well and within your policy.
Can you block AI tools we have not approved?
We can make approved tools the easy choice and restrict others on managed devices, but no control is complete. The policy and training matter as much as the settings.
How often should the policy be reviewed?
AI tools change quickly. We suggest reviewing it at least once a year, or when you adopt a new tool. The policy is yours to review. We can run a follow-up project if you would like help.