Twenty sections and five appendices, drafted as clause text rather than an outline: the permission matrix, the tool tiers defined by contract, the agent blast-radius table, and the two clauses almost no published policy carries.
What's inside
The permission matrix: your data classes against three contractual tool tiers, with the rule that the top class is prohibited even in approved tools
Tool tiers defined by what the contract says, so the policy survives a product rename
Agent blast-radius table: read-only, sandbox write, production write, irreversible action, with the control each one requires
A protected-activity savings clause and a bottom-up reporting duty, both rare in published templates
Appendix A records the underlying model, not just the product name; Appendix B is the one-page paste decision tree
Source notes state what the template deliberately does not claim, and why
Download the policy template
Work email only · No spam · Instant download
Ready to see AccuroAI in action?
30-min demo. We'll walk your AI exposure, show live redaction, and map the fastest path to governance readiness.