A written policy governing how your team uses AI tools: approved tools, permitted and prohibited uses, client-data rules, human review, and disclosure. The piece almost no firm has yet.
- Approved-tools list and acceptable-use rules
- Client confidentiality and IRC 7216 guardrails
- Human-review responsibility and a staff acknowledgment