ISO 42001 AI Policy & Acceptable Use Policy Template Pack
ISO 42001 AI Policy & Acceptable Use Policy Template Pack
Instant download. Editable files. One-organization licence. 5-day fit guarantee.
Couldn't load pickup availability
Upgrade and save
The ISO 42001 AIMS Implementation Toolkit includes this pack plus 26 more templates: gap assessment and Statement of Applicability, AI risk register, impact assessment, AIMS manual, procedures, internal audit, management review and training. All 30 for $249.
See the ISO 42001 AIMS Implementation Toolkit (30 Templates)Not ready to buy? Get the free ISO 42001 readiness checklist
5-day fit guarantee. If it does not fit your AI management system, ask for a refund within 5 days. Conditions.
An AI policy your leadership can approve and acceptable use rules your staff will actually follow. Written for the person who has been asked to sort out the company AI policy, with no AI expertise needed.
What you get
- AI Policy (Word, 8 pages): the top-level policy with principles, commitments, your AI roles (provider, developer or user), responsibilities, a risk appetite table, how AI systems get approved, reporting concerns and review. Supports clause 5.2 and controls A.2.2 to A.2.4 and A.3.3.
- Generative AI Acceptable Use Policy (Word, 8 pages): a short version with 10 rules, Green / Amber / Red data rules, and sections on coding assistants, meeting note-takers, AI agents, prompt injection and decisions about people. Ends with an OK / Ask first / Never examples page and a staff acknowledgement form.
- AI Tool Approval Register (Excel): request form, 15 screening questions that set a Low, Medium or High tier automatically, a register of tools and decisions, and a dashboard.
- Staff AI Quick Guide (PDF, 2 pages): a do and don't sheet to send round or pin up.
- Start Here guide (PDF): the order of work, time estimates, what good looks like and common mistakes.
Also included in the ISO 42001 AIMS Implementation Toolkit.
How to use it
- Read the AI Policy end to end and decide who holds each AI responsibility (30 minutes).
- Fill the placeholders and risk appetite table, then get top management approval (2 to 3 hours).
- Ask every team which AI tools they use, including AI features inside existing software, and screen each one in the register.
- Copy approved tools into the Acceptable Use Policy and swap the examples for ones from your business.
- Launch: send the Quick Guide, publish both policies and collect signed acknowledgements.
Who it is for
Founders, operations managers, HR leads and IT leads who need sensible AI rules now, whether or not ISO/IEC 42001 certification is on the plan. It is the usual first step for an AI management system, because the AI policy (clause 5.2) comes before most other work.
Good to know
- Instant download. Editable Word (.docx) and Excel (.xlsx), plus PDF. Works in Excel 2016 or later, Microsoft 365 and LibreOffice; no macros.
- Licensed for use within one organization.
- Requirements and controls are summarized in our own words and referenced by number; the templates do not reproduce ISO/IEC 42001. You need your own licensed copy of the standard.
- These templates help you prepare. They do not guarantee certification; your certification body decides based on how your AI management system works in practice.
- 5-day fit guarantee: if it does not fit your system, contact us within 5 days of purchase.

What every download includes
Templates refer to ISO/IEC 42001:2023 clause and Annex A control numbers and describe requirements in our own words. They do not reproduce the text of the standard, so you need your own licensed copy. Templates support your AI management system; they do not guarantee certification.
Questions about ISO 42001 AI Policy & Acceptable Use Policy Template Pack
What is the difference between the AI Policy and the Acceptable Use Policy?
The AI Policy is the top-level statement leadership approves: principles, commitments, roles, risk appetite and how AI systems get approved. It is the document ISO/IEC 42001 clause 5.2 asks for. The Acceptable Use Policy is the practical rulebook for staff using chat assistants, copilots, note-takers and agents, with clear data rules and examples.
Do I need to be pursuing ISO 42001 certification to use this pack?
No. Many buyers simply want clear AI rules before something goes wrong, or need to answer customer questionnaires about AI use. The documents are written so they work on their own. If you later pursue certification, they already reference the relevant clause and Annex A controls, so nothing is wasted.
How does the AI Tool Approval Register work?
Someone requests a tool using the request form. You answer 15 screening questions about data, users, outputs and the vendor, and the workbook assigns a Low, Medium or High tier automatically. The register records the decision, conditions and review date, and the dashboard shows what is approved, pending or refused.
How long does it take to put the pack in place?
The Start Here guide adds up to roughly 9 to 13 hours of work: two to three and a half hours for the AI Policy, two to four hours to list and screen the tools already in use, about three hours to finish the Acceptable Use Policy, and one to two hours to launch. Then review the register monthly for a quarter.
How will I receive the files?
A download button appears on the order confirmation page and the same link is emailed to you within a few minutes. Bundles arrive as one ZIP file.
Can I get a refund?
Yes. With our 5-day fit guarantee, if the files do not fit your AI management system you can ask for a full refund within 5 days of your order. It applies once per customer and organization, covers the whole product, and requires you to confirm you have deleted the files. We also refund non-delivery, defective files, wrong items and duplicate purchases within 30 days. Read the full refund policy.
Can I see the files before I buy?
Yes. The images above show real pages from the files, and the free ISO 42001 readiness checklist lets you check where you stand before you buy.
Can I use the templates with more than one company?
Each purchase is licensed to one organization. Consultants and groups need one licence per client or legal entity. See the licence agreement.
Templates that work with this one
Useful next steps when you build an ISO/IEC 42001 AI management system.
ISO 42001 Starter Bundle (Gap + SoA, Risk Register, Impact Assessment)
