Template
AI policy with an agent annex: the template for mid-sized companies
An AI policy sets out who may use which AI tools with which data. Our template goes one step further: a separate annex covers AI agents that do not just answer but change files, send e-mails or operate other systems.
What is inside
- Scope, roles and responsibilities
- Approval list for AI tools and data classes
- Ground rules for use, including labelling under Article 50 of the AI Act
- AI literacy under Article 4 of the AI Act and a record sheet for your measures
- Agent annex: register, permission levels, connectors, human oversight, logging, prompt injection
Who it is for
Managing directors, IT leads, data protection officers and everyone introducing AI in a company.
Get the template by email
Word file (DOCX), German or English, as of October 2026. A sample, not legal advice: adapt the template to your company and have it reviewed by counsel if needed.