Should our AI use policy be part of customer contracts?
Often yes, at least as a commitment the client can rely on, but keep the contract shorter than the policy. Clients increasingly add clauses on AI: no use of their data to train models, no processing by AI services outside agreed sub-processors or regions, disclosure when deliverables are AI-assisted, and notification if their data was exposed through an AI tool. Rather than attaching your whole internal policy, which changes often, commit to a few stable principles in the contract or the data-processing agreement, list the AI services that process client data as sub-processors where they do, and refer to the policy as maintained by you. Make sure you can keep every promise in practice: a clause saying no client data ever goes into AI tools is worthless if staff use personal chatbot accounts and you cannot see it. Agree on what counts as AI-assisted work, because most office software now has AI features. Have the wording reviewed by legal counsel. From the Pro plan, NetSenX shows which AI services your devices actually reach, a useful check before you sign such a clause.