Policy · Attest

Publish an AI policy, and prove your team has read it.

A policy nobody signed is not evidence. Normis turns a plain AI use policy into a tracked sign-off: publish from a template, send it round with one click, and keep a version-hashed record of who acknowledged it and when - useful proof for the Article 4 AI literacy duty.

Who it is for

Do I actually need to do this?

The Article 4 AI literacy expectation has applied since February 2025, and it reaches ordinary companies, not just AI builders. You do not need a training course or a learning platform to make a credible start - a clear policy your team has read and acknowledged is the practical baseline.

This is likely relevant to you if:

  • Your staff use any AI tools at work, even just ChatGPT or Copilot.
  • You want a simple way to set the ground rules for responsible AI use.
  • A customer or auditor might ask what your AI policy is and who has agreed to it.

Being honest about scope: a signed policy is partial evidence for Article 4. It shows you have set expectations and your team has acknowledged them. It is not a full training record, and we will not pretend it is one.

Policy & attestation
Publish

A policy from a template, not a blank page.

Start from one clear template written for the post-omnibus Article 4 wording, fill a handful of blanks, and publish.

Publish policy
AI Use Policy v3
POL-003
ref v3

Approved tools, responsible-use rules, who to ask. Filled from your details, published in minutes.


Attest

Get the team to sign, without the chasing.

Send the policy round and let Normis do the nagging. Each employee gets a unique magic link - read, type their name, acknowledge.

Policy sign-off · 18 of 24
MOMaeve O’Connor
Signed
TBTom Brennan
Signed
PSPriya Shah
Opened
SKSara Kelly
Not opened

Prove

The sign-offs land in your evidence pack.

Your policy and its full attestation list fold straight into the sealed evidence pack, alongside your register and classifications.

Attestation seal
7c2d·b1a8·e0f4
Sealed 11 June 2026, 09:14 UTC
Verified · not altered since

How it works

From template to signed-off, in four steps.

1Step 1

Publish

Fill the template blanks and publish v1.

2Step 2

Send

Paste your staff emails; everyone gets a magic link.

3Step 3

Track and chase

Watch sign-offs land; nudge the stragglers in one click.

4Step 4

Export

The policy and its sign-off list come out inside the evidence pack.

Frequently asked questions

Do I actually need an AI policy?

There is no standalone rule that says write an AI policy, but the Article 4 AI literacy expectation (live since February 2025) reaches any company whose staff use AI. A short, acknowledged policy is the most practical way to show you have set responsible-use expectations.

Is a signed policy enough for Article 4?

It is partial evidence, not the whole thing. It shows you have set expectations and your team has acknowledged them. Article 4 is about literacy more broadly, so treat the policy and sign-off as a credible baseline, not a complete training record.

Do my employees need to create an account to sign?

No. Each person gets a unique magic link by email - they read the policy, type their name, tick to acknowledge. No account, no password, no app.

How is this better than emailing a PDF and asking people to reply?

Email replies are not proof. Normis records who signed, which exact policy version, when, and the document hash, then tracks signed-versus-outstanding live and chases the gaps. The result is a clean record bound to the policy version, not a thread to dig through.

Can I update the policy later?

Yes. Publish a new version and it is snapshotted and hash-stamped separately. Existing sign-offs stay tied to the version they were made against, so your history stays accurate.

Why not just use my HR system's document acknowledgement?

You can, but a generic acknowledgement is not bound to a version-hashed policy or folded into an AI Act evidence pack. Normis ties the sign-off to the exact document and puts it where an auditor or buyer expects to find it.

Is Normis legal advice?

No. The template and guidance are plain-English and practitioner-reviewed, but Normis is not a law firm. For a complex policy question, take legal advice.

Find out where you stand in eight minutes.

The classifier is free, no signup, no card. See what applies to you, then publish a policy and get your team signed up in an afternoon.