AI Lab · Free tool
Company AI usage policy generator (Morocco, France, EU)
Create an artificial intelligence usage policy tailored to your company in minutes: approved tools, forbidden data, human review, security, incidents. Up-to-date legal framework for Morocco, France and the EU, in English, French or Arabic.
🔒 Everything is computed in your browser: nothing is sent to or stored on a server.
Start from a template:
1. Your company
2. AI tools used or allowed
3. Data handled in the company
4. Uses
5. Mandatory human review before…
6. Governance
Your policy
Rolling it out: the checklist
The legal framework taken into account
🇲🇦 Morocco
Law 09-08 on personal data protection, supervised by the CNDP (declaration or authorisation of processing, regulated transfers abroad). Its article 11 forbids basing a decision with legal effects solely on automated processing that evaluates personality. No AI-specific law has been adopted so far (October 2026): a framework is being prepared.
🇪🇺 European Union and France
Regulation (EU) 2024/1689 on AI: prohibited practices (article 5) and AI literacy (article 4) apply since 2 February 2025, transparency obligations (article 50, deepfakes and public-interest text) since 2 August 2026. The "omnibus" Regulation (EU) 2026/1744, in force since 27 July 2026, reworded article 4 and postponed high-risk obligations. GDPR: article 5 principles, automated decisions (article 22), breach notification within 72 hours (article 33), impact assessment (article 35).
🇫🇷 France, companies with 50 or more employees
Depending on the tools' foreseeable impact on work, introducing AI may require informing and consulting the works council (CSE) under article L2312-8 of the Labour Code ("introduction of new technologies"). To be enforceable, a policy is usually annexed to the internal rules.
A template to adapt to your situation: it does not replace advice from a lawyer. For your legal notice and privacy policy, also use the legal notice generator. The guide: what never to paste into an AI →
What the policy contains, section by section
Preamble and scope
Why the policy exists and who it applies to: employees, interns, contractors, on any device used for the company.
Principles
Human accountability, confidentiality, transparency, verification and non-discrimination: the rules that guide every unforeseen case.
Tools and data
Which tools are allowed, with which kind of account, and which data must never be entered into them.
Uses and human review
What AI may do, what is forbidden, and what a person must always review before use.
Security, intellectual property, transparency
Accounts, extensions, prompt injection; who owns the content; when to inform clients.
Training, incidents, sanctions, review
How staff are trained, what to do after a leak, what breaches cost and when the policy is reviewed.
Why this tool
Tailored to your answers
Size, country, tools and the data you handle genuinely change the content: a clinic and a web agency do not get the same policy.
An up-to-date legal framework
The EU AI Act after the 2026 omnibus, GDPR, Moroccan law 09-08: the obligations cited are dated and checked against the texts.
Ready to share
Formatted preview, Markdown or text export, print to PDF, and a checklist to make it actually applied.
Frequently asked questions
Is an AI policy mandatory?
No text requires this document as such. But the EU AI Act asks companies that use AI to develop their staff's AI literacy, and GDPR and Moroccan law 09-08 require data protection: a policy is the simplest way to show it.
Does the EU AI Act apply to a Moroccan company?
In some cases, yes: when it places an AI system on the European market or when the output is used in the Union. A company working with European clients has every reason to comply.
Should staff be banned from ChatGPT?
Banning without an alternative pushes people to hidden use. Better to approve suitable tools, preferably business versions, and clearly forbid entering certain data.
Are my answers sent anywhere?
No. The policy is generated in your browser; nothing is transmitted or stored on a server.
Going further
Security: what you should never paste into an AI (and how to work anyway)
Read the guide →Play Store listing generator
Open the tool →llms.txt and AI robots
Open the tool →Coding agent instructions file
Open the tool →Prompt library by profession
Open the tool →Automation ROI calculator
Open the tool →AI API cost calculator
Open the tool →Anonymiser before sending to an AI
Open the tool →Local AI hardware calculator
Open the tool →Business AI assistant designer
Open the tool →Bring AI into your business, for real?
Automations, assistants, multilingual content, apps: I design solutions that are useful, measurable and respectful of your data.