RuleFrame handbook
Practical AI governance guides.
Clear explanations of AI usage policies, risk decisions, prompt safety, and employee guidance for small businesses.
UK GDPR and AI: What Changed After Brexit
A practical guide to UK GDPR's new automated-decision rules, ICO guidance, international transfers, and dual UK-EU obligations for SMEs using AI.
ICO AI Guidance: A Practical Guide for UK SMEs
How UK SMEs can use the ICO's AI guidance and risk toolkit while key pages are under review following the Data (Use and Access) Act.
GDPR Article 22: A Guide to Automated Decisions
Learn when EU GDPR Article 22 applies to AI-assisted decisions, which exceptions exist, and what safeguards and records an SME may need.
EU AI Act for Small Businesses: What Applies Now
A practical guide to EU AI Act scope, risk classification, current deadlines, and the first actions an SME should take when it uses AI.
An Employee Pasted Customer Data Into ChatGPT. Now What?
What to do after an employee pastes customer data into ChatGPT: assess exposure, contain it, document the incident, and prevent a repeat.
AI Vendor Security Checklist: What to Ask Before Approval
The questions to answer before approving an AI vendor — data handling, training, retention, security, subprocessors — and which answers should stop it.
Does ChatGPT Train on My Data? How to Read AI Vendor Terms
How to find what an AI vendor does with your business data — which sections of the terms matter, the phrases that signal training and retention.
The Monthly AI Usage Review: A 30-Minute Routine
A recurring review for AI use in a small business — the six things worth checking each month, what to skip, and the patterns that need a policy change.
The AI Tool Approval Process for Small Businesses
A lightweight approval workflow for new AI tools — who requests, who decides, what gets recorded, and how to keep it under a week.
How to Review AI-Generated Content Before It Goes Out
A practical review process for AI-assisted work — which outputs need checking, the five things to verify, and how to stop it becoming a rubber stamp.
AI Incident Response: What to Do in the First Hour
A practical incident plan for AI mistakes — four severity levels, the first-hour actions for each, what to record, and how to review afterwards.
AI Hallucinations: What They Cost a Small Business
Why AI tools state wrong things confidently, the five ways it shows up in small business work, and the checks that catch it before a customer does.
AI Disclosure: Should You Tell Customers You Use AI?
How to decide when to disclose AI use to customers — the contract and platform terms that require it, how to word it, and where the legal questions begin.
Small Business AI Governance Checklist: 20 Steps
Twenty governance steps to complete before letting employees use AI tools — covering policy, tool approval, training, and vendor review.
7 Prompt Safety Tips Every Employee Should Know
Practical prompt hygiene for employees — the seven most common ways sensitive information ends up in AI tools, and how to avoid them.
AI Risk Management for Small Businesses: A Framework
How to assess and manage AI risk without a compliance team — the five risk dimensions, what low vs. high risk looks like, and which safeguards help.
ChatGPT Rules for Employees: What to Allow and Ban
Practical employee rules for ChatGPT and AI tools — what employees can do, what they cannot, and how to handle violations without a compliance mess.
How to Write a Small Business AI Usage Policy + Template
A practical guide to creating an AI usage policy from scratch — what to include, what to avoid, and how to roll it out to your team.
Get notified when we publish new guides
No spam. Unsubscribe any time.