How to Write an AI Usage Policy for Your Small Business (With Template)
A practical guide to writing an AI usage policy your team will actually follow, with a plain-language starter template covering approved tools, data rules, and disclosure.
We work on site with your staff to map where client, donor, and program data flows today, inventory the tools your team already uses, write your AI usage policy and approved tool list, and hand you a prioritized roadmap. Fixed scope, so the cost is known before you commit.
Hands-on sessions by role for program staff, development, and operations, built on the tools your organization approved and on your real grant, report, and case-note work. Documentation stays behind for new staff and volunteers.

When a program needs stronger isolation or a tighter fit, we deploy private models on hardware you control and build integrations with your case management system or donor CRM. Fixed quote, and you own the result.
Vendors change their terms and California keeps adding privacy rules. Subscription-based support re-vets your tools, keeps the policy current, and answers the "can we use this?" questions as they come up.

We built production AI systems in environments where personal data protection is non-negotiable, and our team brings engineers and consultants from Microsoft, Amazon, and other leading tech companies.
We observe how your program, development, and operations staff actually work first, so training and tools fit your case management system, your grant calendar, and your volunteers rather than the other way around.
A fixed-price assessment starting at $2,500 and On-Going Support starting at $30 per employee per month, with no hidden fees. You see real cost estimates for every path before making a commitment.
Client confidentiality, donor trust, funder and government contract data terms, and HIPAA or 42 CFR Part 2 where your programs touch health or substance use services are built into every workflow and the written policy we leave behind.

A practical guide to writing an AI usage policy your team will actually follow, with a plain-language starter template covering approved tools, data rules, and disclosure.

A home care agency ran its schedule on a decades-old HIPAA-compliant platform with no API. We audited the office's workflows, budget, and compliance needs, then built two Claude Cowork automations: open-shift scheduling (5 minutes to 39 seconds per household) and HR email drafting (40% less time).

Buying ChatGPT seats is the easy part. Only 15% of U.S. workers use AI daily, per Gallup. Here is the 30-day plan that turns paid licenses into daily use.
Organizations of 5 to 200 staff: community and social service agencies, foundations and grantmakers, membership associations, and arts and education nonprofits. The programs differ, but the problem is the same: grant, reporting, and communications work AI can absorb, and client and donor data that needs an approved tool and a written policy.
As a drafting aid, yes, and it is usually the fastest win. AI is good at turning your program data, past proposals, and outcome reports into a first draft for each funder's format. Two rules keep it safe: a person checks every number and claim against your records before submission, and you check each funder's guidelines, since some now publish rules on AI use in applications. Both go into the written policy.
Generally not. The CCPA is written for for-profit businesses, so most California nonprofits fall outside it. That does not leave client and donor data unregulated: HIPAA applies to any program that is a covered entity regardless of tax status, federally assisted substance use disorder programs fall under 42 CFR Part 2, and government contracts and funder data-sharing agreements usually carry their own data terms. The assessment maps which of these actually apply to you.
Only into a tool your organization has approved for client data, under a written rule about what may go in. Consumer chat tools with default settings can train on what you paste, and a case note often holds a client's health, immigration, or housing situation. Most organizations end up with an approved business-tier tool for case work, a consumer tool allowed for outreach and newsletters with no names attached, and a one-page rule every staff member and volunteer can quote.
Yes, with the same line drawn. AI drafts thank-you letters, appeals, and impact updates well, and a donor's giving history belongs in your CRM or an approved tool, not a personal chat account. A person reviews every message before it goes out, because a wrong gift amount or a misspelled name costs more trust than the time AI saved.
The assessment is fixed-scope, so the cost is known before you commit, and it tells you which tools are worth paying for at all. Many AI and productivity vendors offer nonprofit pricing on their business tiers, and we check your eligibility during tool selection. Grant reporting, case narratives, and document review tend to deliver the fastest measurable time savings.
It should. An AI usage policy sets rules for client and donor data, which is a governance question, and funders and auditors increasingly ask whether one exists. We write the policy in plain language your board can review and adopt, and we brief the board on what it covers if that helps the vote.
No. The organizations that get the most from AI use it to clear the reporting and drafting work that pulls people away from clients: outcome reports, case narratives, grant drafts, meeting notes, newsletters. Staff and volunteers keep the relationships and the judgment calls. Our training uses your real work so the habit survives after we leave.
Our team is based in Irvine and most clients are in Orange County and greater Southern California, where we can train your staff and volunteers in person. Remote engagements work fine for the assessment and On-Going Support.
A price range from our two-minute quote form, a 30-minute kickoff meeting over video or in person, a written proposal, then the on-site AI Strategy & Assessment: tool and vendor inventory, client and donor data flow review, a written AI usage policy, and a prioritized roadmap.
Stay current with our latest AI insights. Unsubscribe anytime.
Have a question about AI at your organization? Send us a message and we will reply within one business day.