These tools are allowed
Which AI tools may be used for what, for example ChatGPT or Claude. Plus a box for “company accounts only”.
One page, four lines: which AI tools are allowed, which data never goes in, who checks before anything goes to a customer, and who to ask about new tools. To print and fill in.
Print it, add the date, hang it up in the office.
PDF · 1 page A4 · no sign-up
At the top you fill in your business, the date and the version. Below are the four rules, each with an example, boxes to tick and lines to fill in.
Which AI tools may be used for what, for example ChatGPT or Claude. Plus a box for “company accounts only”.
To tick: customer data, account numbers, employee data, contracts, passwords, health data. Plus a line for your own points.
What gets checked before it reaches customers, such as emails, quotes or website texts. And who checks.
Who decides on new tools and how to reach that person. So nobody experiments behind everyone's back.
For a small team, a short round at your next meeting is enough.
Who already uses which AI tools, and for what? The answers become line 1. Rules the team helped decide are more likely to be followed.
Enter the tools, tick the off-limits data, name one person who checks and one for new tools.
Fill in the date and version at the top, then put it where everyone sees it. At the bottom, note when you discussed it.
A tool is added or dropped: update the line, set a new date. File the old version.
In the business check you describe in a few sentences where things are tight. At most four questions, by text, voice or photo. Then you tap the ideas that interest you and get a first concept by email. No sign-up; your email address is only needed at the end. The check runs in German.
Go to the business checkHalf a day for up to 10 people, on-site in the Stuttgart area or online, with a certificate of attendance for each participant. One block of the training covers rules for the business: allowed tools, off-limits data, who checks before anything goes out.
More about the AI trainingNothing. You download the PDF directly, without signing up and without an email address.
On its own, probably not. Since 27 July 2026, Art. 4 asks businesses to take measures to support their people's AI literacy. A rules page sets out what's allowed, but it hardly builds knowledge. It makes sense to combine it with training or a briefing, both documented with a date. The template is not legal advice.
As a rule of thumb: nothing that identifies customers or employees, and nothing confidential. The template lists, to tick: customer names and contact details, bank account and payment details, employee data, contracts and trade secrets, passwords and health data. Anything else that's off limits for you goes on the free line.
Yes, it's meant for your business. Cross out what doesn't fit and add your own points. What matters is that the date and version are at the top, so everyone knows which rule applies.
Yes, as a separate PDF with the same four lines. Handy if not everyone on your team speaks the same language.
In the intro call you describe how your team uses AI today. OsAI tells you honestly what makes sense next: rules, training or a first workflow.
Fellbach near Stuttgart · on site in the Stuttgart and Rems-Murr area · remote across Germany