Clear rules for data handling, records, user access and retention, written for your whole organisation.
Practical AI use policies that protect personal data, name approved tools and require human review of output.
A digital policy sets how your organisation selects, secures and uses digital tools and records. It covers data handling, user roles and permissions, storage, retention, brand use and acceptable use, written in plain English.
Good policy reduces risk, makes workflows reliable, satisfies donor due diligence and protects your organisation’s reputation with the public.
Your staff are already using ChatGPT, Gemini, Claude and Copilot on organisational work, usually without rules.
An AI use policy names approved tools, defines what data must never be entered, protects personal, beneficiary and donor information, requires a person to verify output for accuracy and bias, and sets who is accountable when AI informs a decision.
Pair the policy with a two-hour staff session so the rules actually stick.
We audit current tools and data practices, map risks, define roles, draft policy in plain English, and train staff. Our work draws on the AU Continental AI Strategy, the Malabo Convention, the AU Data Policy Framework and the SADC Model Law on Data Protection, alongside national laws such as Zambia’s Data Protection Act 2021.
We prepare organisations for compliance; we do not certify it. Where you need specialist security testing, such as penetration tests or incident response, we bring in licensed partners and guide you through the results.
Get clear, practical rules for tool use, data protection and responsible AI. Whether you are a four-person NGO or a large institution, we deliver policies fitted to your risks and legal obligations. Book a call to explore a Data Protection and Cyber Readiness Review or a full policy pack, and we will send you a quote.
