Templates / Attestation Flow

AI usage policy template

For staff using generative AI tools. Only approved tools may be used, personal data, secrets and unapproved source code must never be entered, users own the accuracy of the output, and the pack is re-attested every 180 days.

• App: Attestation Flow for Confluence
• Category: Security
• Edition: Picking the pack works in every edition; the paid settings and the starter text need a paid licence
• Re-acknowledge: every 180 days

Note shown to readers:

By acknowledging, you confirm you will use AI tools only as this policy allows and will check AI output before relying on it.

Template. This template is a starting point, not legal advice. Adapt it to your organisation, your contracts and the law that applies to you, and have it reviewed by a qualified professional before you rely on it.

Approved tools

Use only the AI tools listed at [link], with your company account. Other tools need approval from [role].

Data you must never enter

• Personal data about customers or colleagues, unless the tool is approved for it.
• Passwords, keys and other secrets.
• Confidential or restricted information as defined in the classification policy.
• Source code, unless the tool is approved for code.

Using the output

• Check facts, figures and references before you rely on them.
• You are responsible for anything you publish or send, whether or not AI helped.
• Say when content was substantially generated by AI where [rule, for example customer contracts] requires it.

Prohibited uses

Do not use AI to make decisions about people (hiring, performance, credit) without human review, or for anything that breaks our code of conduct or the law.

Includes 2 quiz questions; the answers are not published here. They are shown only in the app's requirement editor, to the person setting up the requirement, who can change them before saving.

1. May you paste customer personal data into a public AI chatbot?
   • Yes, if it saves time
   • No, only approved tools and only data classes they are approved for
2. Who is responsible for the accuracy of work produced with AI help?
   • The AI vendor
   • You

Edit a Confluence page, insert the Attestation Flow macro, open the requirement editor and pick the pack under Start from a policy pack. It fills the note and the due date; with a paid licence it also fills the re-acknowledgement window, the minimum reading time and the quiz, and can add the starter text to the page. Required readers are never preset: you choose them.

• Attestation Flow for Confluence documentation
• Confluence policy templates: all 16 templates