# Should our AI use policy be part of customer contracts?

Often yes, at least as a commitment the client can rely on, but keep the contract shorter than the policy. Clients increasingly add clauses on AI: no use of their data to train models, no processing by AI services outside agreed sub-processors or regions, disclosure when deliverables are AI-assisted, and notification if their data was exposed through an AI tool. Rather than attaching your whole internal policy, which changes often, commit to a few stable principles in the contract or the data-processing agreement, list the AI services that process client data as sub-processors where they do, and refer to the policy as maintained by you. Make sure you can keep every promise in practice: a clause saying no client data ever goes into AI tools is worthless if staff use personal chatbot accounts and you cannot see it. Agree on what counts as AI-assisted work, because most office software now has AI features. Have the wording reviewed by legal counsel. From the Pro plan, NetSenX shows which AI services your devices actually reach, a useful check before you sign such a clause.

FAQ: [AI use and AI security](https://netsenx.com/en/faq/ai) · https://netsenx.com/en/faq/should-our-ai-policy-be-part-of-customer-contracts

## Read next

- https://netsenx.com/en/shadow-ai-detection
- https://netsenx.com/en/ai-transparency

## Related questions

- [How do I find local AI model servers running on our network?](https://netsenx.com/en/faq/how-to-find-local-ai-model-servers-on-the-network)
- [Is a local AI model server on the office network a security risk?](https://netsenx.com/en/faq/is-a-local-ai-model-server-a-security-risk)
- [What is AI model supply-chain risk?](https://netsenx.com/en/faq/what-is-ai-model-supply-chain-risk)
- [Is AI-generated code a security risk?](https://netsenx.com/en/faq/is-ai-generated-code-a-security-risk)
- [What is prompt injection?](https://netsenx.com/en/faq/what-is-prompt-injection)