AI Policy and Advisory

Write your AI policy. Then roll it out to every person on staff.

For organizations of roughly 10 to 200 staff, regulated firms such as law, medical, accounting and financial practices, and the HR and operations leaders who get asked “can I use this?” We help you decide the rules, write them down, and teach them.

Workshops from $3,500In person in the Pacific NorthwestTravel and virtual available

How the policy works

The traffic-light method

Every policy we write sorts your data into three tiers. Staff learn one rule per color, and they can check any task against it.

RED

Never goes into any AI tool.

Examples

  • Passwords, API keys and other access credentials
  • Social Security numbers and full bank or card numbers
  • Anything a contract, license or court order says you may not share

YELLOW

Goes only into an approved enterprise AI tool covered by a signed agreement, for example a data-processing agreement, or a BAA for health data.

Examples

  • Client and customer files
  • Patient records (only under a signed BAA)
  • Employee and financial records

GREEN

Can be used in any approved tool.

Examples

  • Public information, such as your website or published reports
  • Internal drafts with no client, patient or personal data
  • General questions and research that name no one

These are common starting points, not rules. Which of your data falls in each tier is decided for your organization in the workshop, and your counsel should review the result.

Options

From a first draft to a policy that stays current.

Each step builds on the one before. Start where your organization is today.

1

Free AI Policy Generator

Any organization that wants a first draft before talking to anyone.

Coming soon

You leave with

A draft policy built on the traffic-light tiers, to review with your counsel.

Timeline

Self-serve

Scope

  • Answer a short set of questions about your organization and the AI tools in use
  • Receive a draft policy with RED, YELLOW and GREEN data tiers
  • Review the draft with your counsel before you adopt it
2

AI Policy Workshop

Leadership teams that need to decide the rules before staff ask.

From $3,500

You leave with

A draft policy, and a named owner for each open item.

Timeline

Half a day, in person in the Pacific Northwest or virtual

Scope

  • Half-day session with your leadership team
  • Inventory of the AI tools already in use
  • Sort your data into RED, YELLOW and GREEN
  • Choose which tools are approved
  • Draft policy, with a named owner for each open item
3

Policy + Rollout

Organizations that want the policy finished and every person on staff trained on it.

From $7,500

You leave with

A final policy, an approved-tool list, and a signed acknowledgment from each staff member.

Timeline

About 3–4 weeks

Scope

  • Everything in the AI Policy Workshop
  • Final policy, ready for your counsel’s review
  • Approved-tool list
  • 2-hour all-staff training on the traffic-light rules
  • Staff acknowledgment sign-off
  • 30 days of questions by email
4

Team Training

Teams that should learn the rules and the tools together, hands-on.

From $12,500

You leave with

The rollout done in the room: staff practice the traffic-light rules on tasks from their own roles.

Timeline

Two days on site

Scope

  • Two days on site
  • Up to 25 people
  • The policy rollout, done hands-on in the room
  • Practice with your approved tools on real tasks
See Team Training→
5

Advisory retainer

Organizations that have a policy and need to keep it current as tools change.

$2,500/month, billed quarterly

You leave with

A policy that stays current, and someone to call when a question or incident comes up.

Timeline

Ongoing, billed quarterly

Scope

  • Quarterly policy review
  • New-tool approvals
  • One staff refresher session per quarter
  • Help when an AI incident happens
  • A monthly call

In person in the Pacific Northwest first. Travel and virtual delivery are available; travel terms are set in your written proposal.

The Process

How an engagement works

  1. 1

    Discovery call

    30 minutes, free. We check fit and agree on scope.

  2. 2

    Written proposal

    A written scope with a fixed price, before any work starts.

  3. 3

    Workshop

    Half a day with leadership: tools in use, data tiers, draft policy.

  4. 4

    Rollout

    Final policy, approved-tool list, staff training and sign-off.

  5. 5

    Optional retainer

    Quarterly reviews and help as tools and rules change.

Scope

What we don’t do

We don’t build or host AI systems.

The Institute teaches and writes policy. If you need a system built, Northline Systems builds them: gonorthline.com.

We are not a law firm.

We do not give legal advice. Every policy we help write should be reviewed by your counsel before you adopt it.

Where we deliver

In person in the Pacific Northwest first. Travel and virtual delivery are available; travel terms are set in your written proposal.

Questions

What people ask before they book.

Do we need a policy if we only use ChatGPT?

It is worth having one. Using a single tool does not answer what staff may paste into it, or which account plan is approved for work. A policy settles both, and it can be short. Whether you need one now is your decision; we can talk it through on the discovery call.

Is this legal advice?

No. The Institute is not a law firm. We help you make the decisions and write them down in plain language. Have your counsel review the policy before you adopt it, especially if your organization works under professional or industry rules.

Can you work with our existing IT or compliance lead?

Yes, and we recommend it. Your IT lead knows which tools and accounts you have. Your compliance lead knows which rules apply to you. Where possible, we ask them to join the workshop.

What if our staff are already using AI tools without a policy?

Then the workshop starts there. It begins with an inventory of the tools already in use, so the policy reflects what people actually do. The goal is clear rules going forward, not blame.

Do you only work in the Pacific Northwest?

We deliver in person in the Pacific Northwest first. We also travel, with travel terms set in your written proposal, and we can run the workshop and staff training virtually.

Start with a 30-minute call.

Free. We talk through how your organization uses AI today and which option fits. If there is a fit, you get a written proposal with a fixed price.

Book a discovery call→