Includes 4 documents
Generative AI Starter Kit
Four base documents to start with from day one: usage rules, intellectual property, a tool inventory and staff training.
USD 109USD 176
Complete kit · available to buyEmployees use generative AI (ChatGPT, Copilot, Gemini…)
Staff use of generative AI assistants to draft, summarize, translate, analyze or research in daily work, with approved or unapproved tools (shadow AI). The risk lies in the data entered, reliance on wrong outputs and ownership of what is generated.
Examples
- Drafting emails and proposals with ChatGPT
- Summarizing contracts or reports with Copilot
- Translating internal documents with Gemini
- Analyzing spreadsheets with an AI assistant
By country
We only list countries where an obligation in force or adopted mentions this use case.
How rules treat it, by jurisdiction
| Jurisdiction | Level | Date | Note |
|---|---|---|---|
| European Union | Minimal risk or no specific regime | February 2, 2025 | Minimal risk under the AI Act, but AI literacy (Art. 4) and prohibited practices (Art. 5) apply to every use since Feb 2, 2025. |
| Spain | Data protection | — | Entering personal data into an external tool requires a legal basis, a processor agreement (GDPR Art. 28) and transfer controls; the AEPD published a model generative AI policy. |
| Peru | Minimal risk or no specific regime | September 10, 2026 | Acceptable risk, but the Law 31814 regulation requires an internal policy and staff training. Deadline depends on the company's sector: health, education, justice, security and finance Sep 10, 2026; transport, commerce and labor Sep 10, 2027; production, agriculture, energy and mining Sep 10, 2028; others Sep 10, 2029; small businesses Sep 10, 2027 and micro businesses Sep 10, 2028 unless their sector has an earlier date. |
| Ecuador | Data protection | March 10, 2026 | The SPDP general rule on AI covers any personal data processing with AI, including external assistants. |
| Brazil | Data protection | — | The LGPD applies when personal data is entered; international transfers require ANPD standard clauses. |
| United States (federal) | Minimal risk or no specific regime | — | No specific law; the risks are confidentiality, intellectual property and, if used to decide about people, employment or credit laws. |
Common base documents
- Responsible AI Use Policy (Including Generative AI)
Policy · USD 39 · Available to buy
- AI Tool Adoption Policy
Policy · USD 39 · Available to buy
- Generative AI Intellectual Property Policy
Policy · USD 39 · Available to buy
- AI Literacy and Training Plan
Plan · USD 39 · Available to buy
- AI System Inventory
Register · USD 59 · Available to buy
- Prohibited AI Practices Checklist
Checklist · USD 19 · Available to buy
Depending on your situation
- If staff enter personal or client data
- If data leaves the country
- If the organization provides professional services with confidential information
- If it is a medium or large organization
Related kits
Includes 6 documents
AI Adoption Starter Kit: First 90 Days
Six base documents to launch AI adoption in the right order: 90-day roadmap, usage rules, tool approval, use case portfolio, pilots and training.
USD 139USD 234
Complete kit · available to buyIncludes 5 documents
AI Assistant Rollout Kit
Five base documents to roll out copilots and assistants in order: rollout guide, unauthorized AI regularization, usage rules, tool adoption and training.
USD 119USD 195
Complete kit · available to buy