“What are our people permitted to do, and how?”
Programme, fundraising and operations staff draft with AI, sometimes on documents containing beneficiary or donor information. Either no rules exist, or a prohibition memo exists and the work continues on personal accounts where nobody can see it. When a funder's due-diligence pack asks about AI governance, there is nothing to attach.
In the 346-organisation benchmark, 47% have no AI governance policy while 92% use AI source. The gap, not the technology, is what creates the exposure.
Illustrative extracts. Your clauses are drafted from your own tool inventory, data and funder requirements.
Programme staff may use an approved tool to draft donor narrative reports from internal notes and the previous report, provided that no beneficiary name, case identifier or location below district level is entered, and that every figure is verified against the source file before the draft leaves the department.Personal and beneficiary data is Class 4. It may not be entered into any AI tool, approved or otherwise, unless the tool is covered by a data processing agreement listed in Annex B and the use is recorded in the register kept by the data protection lead.Where an approved tool has contributed to a document submitted to a funder, the submission states so in the form agreed with that funder, and the responsible officer remains the author of record.Caseworkers may use an approved tool for anonymised summarisation of published guidance only. No case file, referral or client communication may be entered, in whole or in part, and no eligibility or safeguarding decision may be informed by tool output without a documented human review.An umbrella policy covers the organisation. Specific annexes add rules for one department or use where the umbrella is not enough: casework data, fundraising, HR records, procurement.
Typical duration: Three to four weeks
The umbrella policy, with the scoping day and the board round: 5 delivery days for an organisation under 10 staff, 7 days for 10–50, 8.5 days for 50–200, 10 days for 200–500. Specific annexes add 1.5 delivery days for the first and 1 day for each further one. Example: a 10–50 staff organisation, umbrella policy with two annexes: 9.5 delivery days. Training and policy scoped together take a tenth fewer days than apart, because preparation and sessions are shared. Priced per engagement. You receive a written quote after a free scoping call. Book the scoping call →
If a different one fits better, or none does yet, we will say so on the call.