← Back to Tools

AI Core Guardrails

Six questions. A governance framework your steering committee can own and publish today.

1. Which AI tools are approved for use?

Select all that apply.

Why only business/enterprise plans? Free and individual plans (Claude Pro, ChatGPT Plus, etc.) use your data to train their models by default. The plans below contractually exclude your data from training.

2. What data is classified as Restricted (Red)?

Red data must never enter external AI tools without explicit steering committee approval. Select all that apply.

HAIL Framework Reference

Human Integration (H)

H1AI assists, human leads
H2AI produces, human reviews and approves
H3AI produces and quality-checks autonomously

AI Access (A)

A1AI isolated — no system access (copy-paste only)
A2AI can read company systems
A3AI can take actions in systems (write, send, update)

3. What is your default starting HAIL level?

Most organisations start at H1/A1 and graduate upward as they prove value.

4. Who approves moving beyond your default level?

Set the minimum approver required for each risk tier.

One step up (H1/A2 or H2/A1)

Standard use case expansion — slightly more autonomy or system read access

Two steps up (H2/A2 or H1/A3)

AI reads systems and produces output, or has write access with human oversight

High risk (H3 any level, or H2/A3)

Autonomous AI operation or write access with minimal human oversight

5. Which risks must be explicitly acknowledged?

These appear as named obligations in your policy. Most organisations select all three.

6. How often will you review this policy?

The AI risk landscape changes constantly. Quarterly is strongly recommended.

Your Core Guardrails

Live preview

Data Classification

🟢
Green (Public) — publicly available or non-sensitive information
🟡
Amber (Internal) — internal business information, not for external sharing
🔴
Red (Restricted) — sensitive data; Steering Committee approval required before any AI use
No restricted categories selected yet.

Answer the questions on the left to build your policy preview.