Small Business AI Use Policy: A One-Page Template That Holds Up

Half the people working at small businesses already use AI on the job, and almost none have been told how. Closing that gap is what a small business AI use policy is for, and most companies this size still do not have one. The U.S. Chamber of Commerce Foundation's first Main Street AI Monitor, fielded by Ipsos on May 8-11, 2026 among 1,070 employees at U.S. companies with 2 to 499 workers, found about one in ten had been offered formal AI training, and that adoption was nearly twice as likely to come from employees trying tools on their own, 19%, as from the organization's direction, 11%.

The cost is not abstract. Harmonic Security's GenAI data exposure analysis of one million prompts and 20,000 uploaded files in the second quarter of 2025 found 21.86% of files and 4.37% of prompts contained sensitive content, and that 26.3% of sensitive items went through free ChatGPT rather than a managed account. That is the vendor's own browser-based telemetry, so read it as a shape rather than a census. The shape is the point: the leak path is a personal login and a file uploaded to save twenty minutes. Writing the policy is not a legal project. It takes one page, a decision about your data, and a half-hour meeting.

Table of Contents

1. What a Small Business AI Use Policy Has to Do
2. The One-Page Template: Nine Sections in Plain Language
3. Classify the Data, Then Do the Arithmetic
4. What Your Policy Has to Satisfy Outside Your Walls
5. A 30-Day Rollout That Does Not Drive Use Underground
6. Frequently Asked Questions
7. Ready to Write the One Page Your Team Will Follow?

What a Small Business AI Use Policy Has to Do

A small business AI use policy is a short internal document naming the approved AI tools, the information that may and may not go into them, the outputs a person must approve before anyone outside the company sees them, and who to ask when the page runs out. It is an operating instruction, not a legal shield, with three jobs: make the approved path the easy path, draw a data boundary in your own nouns, and leave a record of what each tool produced.

Governance runs well behind adoption. A Cloud Security Alliance research note on shadow AI apps from May 30, 2026 reports that only 37% of enterprises have any AI governance policy, and that in one surveyed population just 18.5% of employees knew of an official one. IBM's 2026 Cost of a Data Breach findings add that 92% of organizations hit by an AI-related breach lacked proper AI access controls, and only 40% used access controls on AI models and data at all.

A small company will not see IBM's USD 4.99 million average loss. It will see a confidentiality clause broken, an owner who leaves, or a candidate asking how their resume was screened, after an owner statement went into a free chatbot for a summary or a seller's financials went in to build a net sheet. Process first, technology second: a policy written before you know how the work moves will describe a company that does not exist.

The One-Page Template: Nine Sections in Plain Language

Nine headings, one or two sentences each, on one side of a page. An unread policy is indistinguishable from no policy, so if it runs to three pages, start over.

1. Scope. Employees, 1099 contractors, cleaners and turnover crews, virtual assistants, licensed agents, bookkeepers. Most small-business policies cover only W-2 staff, missing the people handling the most sensitive files.
2. Approved tools. A short named list, with the account type required for each. Two tools used properly beats twelve nobody can keep straight.
3. The red list. What never goes into any AI tool, in your own nouns: owner statements, guest payment details, signed listing agreements, applicant resumes, payroll files.
4. The green list. What is explicitly fine, so people stop asking: public listing copy, your marketing text, process questions, internal memos, summarizing a document you wrote.
5. Account rules. Company accounts only for company work. State whether model training is off, and who checks that it still is.
6. The human review gate. Which outputs a named person approves before an owner, guest, client, tenant or applicant sees them. A role, not a committee.
7. Disclosure. When you tell the other party AI was involved, and in what words. Decide once, not per email.
8. Logging. At minimum the final version of anything external-facing, who approved it, and when.
9. Who to ask, and the amnesty. One named person, plus a window in which anyone can disclose a tool they already use, with no consequences.

The two lines most templates leave out. The amnesty in section nine is what gets you an honest inventory rather than a polite one. The contractor line in section one matters because the cleaner photographing a damaged unit and the offshore assistant drafting guest replies both work from personal accounts, and your policy reaches them only if your contract does. Before adding a tool to section two, run it through AI vendor evaluation.

Classify the Data, Then Do the Arithmetic

The red list only works if somebody decided what the categories are, so sort your information into four tiers. Four is enough; five is a project nobody finishes.

• Tier 0, already public. Live listing copy, published rates, your website text. No restriction.
• Tier 1, internal and non-identifying. Process notes, checklists, aggregate numbers with no names attached. Approved tools only.
• Tier 2, identifying or commercially sensitive. Owner statements, client and guest contact details, lease and listing terms, payroll, applicant resumes, anything under a confidentiality clause. Business-tier accounts only, training off, named approver for whatever goes back out.
• Tier 3, never. Government ID and payment card numbers, bank and routing numbers, passwords and API keys, health information. No tool, no exception. The reasoning is in what goes in the prompt and what stays out.

Now put numbers on it. Take that hypothetical 140-property manager with nine office staff, each running six AI prompts a working day across 230 working days: 12,420 prompts a year. At Harmonic's 4.37% sensitive-prompt rate, roughly 540 carry something sensitive; at their 26.3% free-account share, about 140 travel through an unmanaged login. Three a week. Replace every assumption with your own, but "be careful" yields no decisions and 140 a year yields several.

The review gate has a price, so scope it. If 30% of those prompts produce something that leaves the company, that is about 3,700 items: at 90 seconds each, 93 hours a year, or near $3,000 at a $32 fully loaded hourly cost. Gate everything and the policy becomes the bottleneck people route around. Gate only Tier 2 and Tier 3 output, closer to 12% of volume, and you are at 1,500 items, 37 hours and $1,200.

What Your Policy Has to Satisfy Outside Your Walls

Three outside parties care what the page says: regulators, the owners and clients whose contracts you signed, and your insurer. Anchor it to your own conduct rather than a single statute, because the statutes are moving.

The state-law picture is unsettled. Executive Order 14365, signed December 11, 2025, directs the Attorney General to stand up an AI Litigation Task Force to challenge conflicting state AI laws, per White & Case. Colorado then repealed and replaced its own landmark AI Act: SB 26-189, signed May 14, 2026, trades the duty of reasonable care and annual impact assessments for disclosure, correction rights, a 30-day adverse-decision notice and three-year record retention, effective January 1, 2027, per Eckert Seamans. A policy built on one state's rules needed rewriting twice in eighteen months. One built on disclosure, human review and retrievable records survives both.

Employment decisions already bind. California's Civil Rights Department rules on automated decision systems took effect October 1, 2025. Per Mayer Brown, they cover recruitment, hiring and promotion, extend liability to an employer's agent acting through an automated system, and require those records to be kept four years. Two lessons travel wherever you hire: a vendor's tool can create your liability, and the record is what you are judged on.

Your insurance may stop covering the output. As Claims Journal reported on July 20, 2026, Verisk's ISO forms now include CG 40 47, excluding bodily injury, property damage and personal and advertising injury arising from generative AI under commercial general liability; CG 40 48, Coverage B only; and CG 35 08 for products and completed operations. Berkley has an absolute AI exclusion for D&O, E&O and fiduciary lines. Carriers are filing these with state regulators, so ask your broker in writing, before renewal, whether an exclusion is attached and what it removes. Have counsel review the page; none of this is legal advice.

A 30-Day Rollout That Does Not Drive Use Underground

Sequence it so the approved path exists before the rules do. A policy that arrives before the tools reads as a ban, and bans move the work out of sight.

1. Days 1 to 7, inventory under amnesty. Ask everyone, contractors included, which AI tools they used for work in the last 90 days, in writing, with an explicit no-consequences window. Expect a longer list than you predicted: CSA cites 2025 telemetry showing roughly 71% of generative AI connections run on personal accounts.
2. Days 8 to 14, provision the approved path. One or two tools, business-tier accounts, model training off, everyone added including the people you nearly left out.
3. Days 15 to 21, classify and draft. Four tiers, nine sections, then counsel.
4. Days 22 to 30, a 30-minute meeting rather than an email. Read the page aloud, work three real examples from your own files including one you would get wrong, and name the person to ask. Email-only rollout is why most policies change nothing.

Four failure modes and their signals. Nobody can name it: ask three people which tools are approved, and if they cannot say, you have a document rather than a policy. The shortcut stays faster: personal logins keep appearing in your identity provider. The gate becomes a rubber stamp: approval times collapse to seconds, so track the share of drafts sent unedited. The page goes stale: a listed tool no longer exists. A quarterly review catches all four.

Keep out of it: a list of prohibited tools you cannot maintain, a blanket ban when half your staff already use AI, model version numbers, legal boilerplate, and any promise that no AI touches client work.

What stays human: declining a listing or ending an owner agreement, any hiring or termination call, anything said to someone upset, and final approval on every external document. AI enhances human judgment; it does not get a signature. The approval pattern for client-facing copy is in the review process a brokerage can defend.

Frequently Asked Questions

Ready to Write the One Page Your Team Will Follow?

The companies getting value from AI are not the ones with the longest policy. They decided which data is off limits, bought the accounts that make the safe path the fast path, and named a person to ask. ANtreliX is a strategy-first AI and business intelligence consultancy in North Myrtle Beach, South Carolina, serving Grand Strand and remote clients. See our case studies or Talk to ANtreliX.