Your AI policy isn't for your staff to read

A written AI policy sounds like homework nobody will read, and if you write it as a legal document, that's exactly what it becomes. The version that works is short, governs who is permitted to use what, and gets explained to the team in about three minutes: keep AI work in the approved tool, don't put certain things in, external documents are fine, personal information isn't. The document itself sits behind that conversation, signed off, so the rules aren't just something someone remembers hearing once.