AI Acceptable Use Policy Template
A comprehensive template for establishing AI usage guidelines across your organization. Covers approved tools, data classification rules, prohibited activities, security requirements, IP considerations, and enforcement procedures.
What's included
- Data classification matrix (Public/Internal/Confidential/Restricted)
- Approved vs prohibited tools framework
- New tool approval request process
- Employee acknowledgment form
- +2 more
AI Risk Assessment Checklist
A structured checklist for evaluating your organization's AI risk posture across 7 critical domains. Score your compliance, identify gaps, and prioritize remediation with built-in risk scoring.
What's included
- 53 assessment items across 7 security domains
- Built-in scoring with risk level guide
- Data security & privacy evaluation
- Shadow AI discovery assessment
- +2 more
Shadow AI Incident Response Plan
A complete incident response plan template specifically designed for Shadow AI security incidents. Covers detection through recovery with severity levels, communication plans, and post-incident review procedures.
What's included
- 4-level severity classification system
- 5-phase response process (Detect → Contain → Investigate → Recover → Review)
- Internal & external communication matrices
- Evidence preservation checklist
- +2 more
AI Vendor Security Evaluation Scorecard
A weighted scoring framework for evaluating AI vendors across 5 security domains: data security, access control, compliance, AI-specific security, and operational security. Includes recommendation matrix and risk identification.
What's included
- 35 evaluation criteria across 5 security domains
- Weighted scoring system (customizable)
- Approval/rejection recommendation matrix
- AI-specific security evaluation section
- +2 more
AI Data Classification Guide
A practical guide defining what data can and cannot be used with AI tools. Includes 4-level classification system, decision flowchart, common scenarios, and file upload rules — the essential reference for every employee.
What's included
- 4-level data classification with AI-specific rules
- Visual decision flowchart for quick reference
- Prompt content rules table
- File upload classification guide
- +2 more
AI Governance Committee Charter
A complete charter template for establishing an AI governance committee with defined roles, responsibilities, decision-making processes, meeting cadence, and success metrics.
What's included
- 7 required committee member roles defined
- 5 key responsibility areas with checklists
- Decision-making and escalation processes
- Monthly and quarterly reporting templates
- +2 more
Employee AI Training Acknowledgment Form
A structured acknowledgment form confirming employees have completed AI training and understand key policies. Includes role-specific sections for managers, developers, customer-facing, and HR roles.
What's included
- Training completion tracking
- Key principles acknowledgment checklist
- Role-specific sections (Managers, Devs, Customer-facing, HR)
- Signature and manager confirmation
- +2 more
AI Governance Maturity Assessment
Evaluate your organization's AI governance maturity across 5 pillars: Policy & Strategy, Risk Management, Security & Technology, Compliance & Legal, and People & Culture. Includes improvement roadmap template.
What's included
- 30 capabilities across 5 governance pillars
- 5-level maturity model (Initial → Optimized)
- Gap analysis and evidence tracking
- Improvement roadmap template (Quick wins → Long-term)
- +2 more
AI Tool Approval Request Form
A structured request form for employees to submit new AI tool adoption requests. Covers business justification, data assessment, security questions, integration requirements, and multi-level approval workflow.
What's included
- Structured business justification section
- Data classification impact assessment
- Security questionnaire for vendor evaluation
- Multi-level approval workflow (Manager → Security → Committee)
- +2 more
AI Governance Monthly Report Template
A comprehensive monthly reporting template for AI governance teams. Covers tool inventory, security incidents, compliance status, training metrics, risk dashboard, and executive recommendations.
What's included
- Executive summary with key metrics
- Shadow AI activity tracking table
- Security incident log and metrics
- Regulatory compliance status dashboard
- +2 more
AI Vendor Security Questionnaire
A comprehensive security questionnaire with 68 questions across 8 domains for evaluating AI vendors. Includes scoring guidance, risk rating framework, and documentation checklist — the essential tool for procurement and security teams assessing AI vendor risk.
What's included
- 68 questions across 8 security domains
- Built-in 0–5 scoring with risk rating framework
- AI model security section (prompt injection, bias, red-teaming)
- Subprocessor and third-party risk management
- +2 more
AI Change Management Plan
A structured change management plan for rolling out AI tools and policies across your organization. Covers stakeholder analysis, communication strategy, training rollout, resistance management, and success measurement.
What's included
- Stakeholder analysis and impact assessment
- Phased rollout timeline with milestones
- Communication plan with templates
- Training and enablement schedule
- +2 more
AI/ML Data Processing Agreement (DPA)
A ready-to-use data processing agreement template tailored for AI and machine learning vendors. Covers data processing terms, sub-processors, cross-border transfers, breach notification, and GDPR/CCPA compliance clauses.
What's included
- GDPR and CCPA-aligned clauses
- AI-specific data processing terms
- Sub-processor management framework
- Cross-border transfer mechanisms (SCCs)
- +2 more
AI Tools Employee Onboarding Guide
A step-by-step onboarding guide for new employees on approved AI tools, security practices, and company AI policies. Includes quick-start guides, do's and don'ts, and a first-week checklist.
What's included
- Tool-by-tool setup and access instructions
- Security do's and don'ts quick reference
- Day 1-30 AI onboarding checklist
- Common use case scenarios with examples
- +2 more
AI Ethics Review Board Charter
Establish an AI Ethics Review Board with this comprehensive charter template. Defines mission, membership criteria, review processes, ethical principles, escalation procedures, and reporting requirements.
What's included
- Mission and scope definition
- Board membership and selection criteria
- Ethical review submission process
- Decision-making framework with principles
- +2 more
AI Governance Executive Briefing Template
A concise executive briefing template for presenting AI governance status, risks, and recommendations to C-suite leadership and board members. Designed for quarterly board presentations.
What's included
- One-page executive summary format
- AI risk heatmap visualization guide
- Compliance and regulatory scorecard
- Budget and investment recommendations
- +2 more
AI Model Validation Checklist
A thorough validation checklist for AI and ML models before production deployment. Covers bias testing, performance benchmarks, security validation, explainability checks, and ongoing monitoring requirements.
What's included
- Model performance benchmarking criteria
- Bias and fairness testing checklist
- Security and adversarial robustness checks
- Explainability and interpretability assessment
- +2 more
Enterprise Prompt Engineering Guidelines
Security-focused prompt engineering guidelines for enterprise teams. Covers safe prompting practices, data leakage prevention, prompt injection awareness, output validation, and approved prompt patterns for common business tasks.
What's included
- 15+ approved prompt templates by use case
- Data leakage prevention rules
- Prompt injection awareness section
- Output validation and review checklist
- +2 more
AI Regulatory Compliance Tracker
Track compliance across major AI regulations including the EU AI Act, NIST AI RMF, ISO 42001, and emerging state-level AI laws. Includes requirement mapping, gap analysis, and remediation tracking.
What's included
- EU AI Act compliance requirement mapping
- NIST AI RMF alignment tracker
- ISO 42001 controls checklist
- US state AI law tracking (CO, IL, CT, etc.)
- +2 more
AI Security Audit Checklist
A comprehensive security audit checklist for assessing AI systems and tools across your organization. Covers access controls, data protection, model security, API security, logging, and incident response readiness.
What's included
- 60+ audit items across 6 security domains
- Evidence requirement for each item
- Access control and authentication checks
- Data protection and encryption validation
- +2 more
Third-Party AI Risk Assessment
Assess and manage risks from third-party AI integrations and embedded AI features in SaaS tools. Covers shadow AI discovery, data flow mapping, contractual requirements, and ongoing monitoring procedures.
What's included
- Third-party AI feature discovery checklist
- Data flow mapping for AI integrations
- Contractual AI clause requirements
- Risk scoring and prioritization matrix
- +2 more
Need More Than Templates?
Templates are a great start, but managing AI governance at scale requires real-time visibility. Aona AI automatically discovers Shadow AI, enforces policies, and provides continuous compliance monitoring.
