Field notes
Practical AI governance guides
I write for the person who got the client questionnaire, found three unapproved tools, and still has an actual job to do.
AI Acceptable Use Policy Template
A practical AI acceptable use policy template with 11 essential sections, sample clauses, and US, Canadian, and EU notes.
Read the guide →§02 · 13 min readAI Policy for Small Business
A right-sized AI policy for small business: control shadow AI, satisfy client reviews, and set useful rules without enterprise bureaucracy.
Read the guide →§03 · 14 min readHow to Answer AI Questions in an RFP
How to answer AI questions in an RFP honestly, with sample responses for governance, data, security, vendors, human review, and incidents.
Read the guide →§04 · 12 min readISO 42001 for Small Business
What ISO/IEC 42001 means for a small business, when certification is excessive, and how to align AI controls without making false claims.
Read the guide →§05 · 12 min readShadow AI: Find Unapproved AI Tools
A practical shadow AI audit for small businesses using surveys, expenses, browser extensions, SSO logs, and a no-blame approval process.
Read the guide →