Loading…
Loading…
AI Policy Desk
Ready-to-use templates, risk checklists, and implementation guides built for small teams navigating EU AI Act, GDPR, and US state AI laws — with no dedicated compliance function.
Updated for EU AI Act, GDPR, and 9 US state laws. No account, no paywall.
What applies to my team?
Featured
Start with these templates
Free tools
Interactive tools — get a clear answer in minutes, no consultant required.
4 questions · 2 min
Compliance Quiz
Which AI regulations apply to your team?
Take the quiz →
4 steps · 5 min
Policy Generator
Generate an AI acceptable use policy for your team.
Generate policy →
15 vendors · filterable
Vendor Scorecard
Compare AI vendors on privacy and compliance.
Compare vendors →
3 steps · 5 min
AI Risk Assessment
Rate your AI use cases Low / Medium / High / Critical.
Assess risk →
Explore
Regulations
28 coveredEU AI Act, GDPR, NIST AI RMF, Colorado AI Act, NY Local Law 144, and more — each explained for small teams.
Browse regulations →
Glossary
75 termsPlain-English definitions for AI governance terms: high-risk AI, GPAI models, conformity assessment, shadow AI, and more.
Browse glossary →
Start here
Pillar guides and templates — pick the one most relevant to your situation.
Latest
Templates, checklists, tool comparisons, and implementation guides for small teams adopting AI safely.
Zoom AI Companion, Otter.ai, and Fireflies.ai handle your meeting data very differently. This comparison covers data training policies, DPA availability, GDPR status, consent mechanics, and the shadow AI bot problem your team may not know about.
Latest posts
When AI agents start replacing roles, you need a written policy first. Template covering displacement notice, human oversight, and appeals.
Microsoft Copilot raises governance questions that Microsoft's own documentation glosses over. This guide covers data training policies, EU residency gaps, DPA status, and the SharePoint access risk that affects every M365 team.
xAI's Grok Build went viral July 14 with 8,700 GitHub stars. Free-tier sends your code to xAI for training. 5 questions to answer before approving it.
Does Grok Build send your repo to xAI? Yes: wire-level tests caught full git repos and unredacted .env secrets uploaded to Google Cloud.
Apple sued OpenAI July 10, 2026 over hardware IP stolen by former employees. Here are 7 gaps in standard offboarding that the lawsuit's allegations reveal.
Sysdig disclosed the first AI-agent ransomware in July 2026. Entry point: Langflow. Here are 8 security checks your AI tool approval process needs now.
Newsletter
Stay current on AI compliance
Weekly digest of new templates, regulation updates, and deadline alerts. Free, unsubscribe anytime.
Subscribe free →No spam · No vendor ads · Unsubscribe anytime
Templates
Get the complete policy kit
Acceptable use policies, vendor evaluation checklists, risk assessments, and more — all in one place.
View template kits →