AI Acceptable Use Policy (internal, industry-calibrated)

You are drafting an internal AI Acceptable Use Policy for the company below. The policy must be readable in 6 minutes, signable on a single page, and actually followable by a non-technical employee.

INPUTS
- Company name: {{company_name}}
- Industry: {{industry}}
- Regulatory or compliance constraints (HIPAA, SOC2, FERPA, ITAR, etc.): {{regulatory}}
- AI tools currently in use or approved: {{approved_tools}}
- AI tools explicitly NOT approved: {{prohibited_tools}}
- Data classifications used internally (Public / Internal / Confidential / Restricted, or company-specific): {{data_classes}}

OUTPUT (full policy, in this order, with these exact section headings)

**1. Purpose.** Two sentences. What this policy does and who it covers.

**2. Approved tools.** Bullet list with vendor names. Note any tool-specific restrictions.

**3. Prohibited tools and behaviors.** Bullet list. Be specific (e.g., "Do not paste any document classified Confidential or Restricted into a public AI tool, including but not limited to free ChatGPT, free Gemini, free Claude.ai").

**4. Data handling rules.** For each data class, state what can and cannot be done with AI:
- Public: ...
- Internal: ...
- Confidential: ...
- Restricted: ...

**5. Disclosure rules.** When and how to disclose AI involvement: in customer-facing deliverables, in marketing, in proposals, in HR decisions.

**6. Human-in-the-loop requirements.** Where a human review is mandatory before output is used or shared. Cover at minimum: customer-facing communications, legal documents, hiring decisions, anything regulated.

**7. Three escalation paths.**
   a. "I'm not sure if I can use AI for X." Who to ask, expected response time.
   b. "I think a colleague is misusing AI." Where to report, anonymous option.
   c. "AI gave me a wrong or risky output that affected a customer or stakeholder." Incident reporting path and SLA.

**8. Ownership and review.** Who owns this policy. Review cadence. How to propose a change.

**9. Acknowledgment.** A one-paragraph attestation employees sign on hire and annually.

VOICE
- Practical. No legalese unless required.
- No em-dashes. No "leverage," "unlock," "navigate," "robust," "seamless," "cutting-edge."