A written AI policy for your team, done in one go
Your team already uses AI. This sets out what’s fine, what isn’t, and which tools to use.
$295 + GST, flat
A tailored policy, a one-page staff summary, an approved-tools list and a 30-minute staff session.
Ready within 5 working days of the intake call.
Booking uses the contact form. Miro confirms by email and sends an invoice, due in 7 days.
Staff are already using AI. Most businesses have no rules for it.
83% of EMA member businesses surveyed use AI, and 13% have a policy for it (EMA, July 2026).
Without rules, people paste customer details into free chatbots, sign up with personal accounts, and nobody knows where the data ends up. A short written policy fixes most of that.
Four things, made for your business
A written policy
Tailored to the tools your team uses and the data you handle.
A one-page staff summary
The rules people will actually read, in plain English.
An approved-tools list
Which tools to use, which account type, and what not to paste in.
A 30-minute staff session
Miro runs it, remote or in person, including how to check AI output.
Official NZ guidance, made practical
The policy draws on the Privacy Commissioner’s guidance on AI and MBIE’s Responsible AI Guidance for Businesses. It covers the parts of the Privacy Act most affected by AI tools, including IPP3A (collecting information from someone other than the person, in force since 1 May 2026) and IPP12 (sending personal information offshore).
It’s a practical policy based on official NZ guidance. It isn’t legal advice. If you need that, we’ll say so.
What a good AI policy covers
- Which tools are approved, and on which account type
- What never goes into an AI tool: customer details, health information, passwords
- Where each tool stores data, and whether it trains on it
- Who checks AI output before it reaches a customer
- Who owns AI in the business, and when the policy gets reviewed
Use this list for free. The paid version is written around your tools, your data and your staff.
Done in one go
-
1
Intake call
A short call about your team, your tools and the data you handle.
-
2
Draft
Your policy, staff summary and tools list, within 5 working days.
-
3
Revisions
Tell us what doesn’t fit and we’ll change it.
-
4
Staff session
30 minutes with your team, so the rules are understood, not just filed.
Questions people ask
Can’t I use a free template?
You can. A template doesn’t know which tools your team uses or what data you handle. This one does, and it comes with a staff session.
Is this legal advice?
No. It’s a practical policy based on the Privacy Commissioner’s AI guidance and MBIE’s Responsible AI Guidance for Businesses. For legal advice, talk to a lawyer.
Does it cover the Privacy Act?
It covers the parts most affected by AI tools, including IPP3A (collecting information from someone other than the person) and IPP12 (sending it offshore).
How long does it take?
Within 5 working days of the intake call, then the staff session at a time that suits.
Who runs the staff session?
Miro, for 30 minutes, remote or in person.
Will you keep it up to date?
It’s yours to update. We suggest reviewing it once a year, or whenever you add a new AI tool.
What comes after the policy?
If you want to know where AI could save your team time, the AI Opportunity Report is the next step.
Clear rules your staff will read
$295 + GST. Policy, staff summary, approved-tools list and a 30-minute session.