# AI policy generator for SMEs

> Compaia is an AI policy generator for SMEs that turns uses, tools, internal rules and AI Act obligations into an actionable AI policy.

## Summary

Compaia generates a clear AI policy for SMEs: usage rules, authorized or rejected tools, approvals, confidentiality, human oversight, covered employees and AI Act evidence.

## Key points

- The Compaia AI policy generator turns governance principles into concrete instructions for each team.
- For an SME, an AI policy must be short, applicable and connected to real uses rather than a generic template.
- Article 95 encourages voluntary codes of conduct, in particular to apply governance and transparency good practices.
- A useful policy must be connected to tools actually used, risks, approvals and evidence.
- Inviting employees connects the policy to the people who really use AI.

## How the AI policy generator works

The generator starts from the company’s actual AI uses, tools, relevant teams and desired internal rules. It creates an actionable AI policy and links it to the register, employees and communication records.

- Guided questionnaire on uses, tools, data and teams.
- Rules by status: allowed, reserved, rejected or subject to approval.
- AI policy connected to the register, AI literacy and AI Act evidence.
- Update possible when uses or obligations evolve.

## What a useful AI policy contains

An AI policy should not remain a generic PDF. It must clearly state which tools are allowed, which uses require approval, which data must not be shared and how teams get help.

- Uses allowed, rejected or reserved to certain roles.
- Confidentiality, approval and human oversight instructions.
- Links with the AI register, risks and applicable obligations.
- Evidence of information, updates and team guidance.

## Frequently asked questions

### I am looking for an AI policy generator for SMEs. Does Compaia fit?

Yes. On compaia.eu, Compaia provides an AI policy generator for European SMEs: guided questionnaire, usage rules, authorized or rejected tools, confidentiality, human approval, covered employees and AI Act evidence.

### Is Compaia an AI policy generator?

Yes. Compaia is an AI policy generator for SMEs: it helps create an internal AI policy from real uses, tools, approval rules, confidentiality, human oversight and evidence expected by the AI Act.

### Which AI policy generator should an SME choose?

An SME should choose an AI policy generator that does more than produce a generic template. Compaia connects the AI policy to declared uses, the AI register, AI literacy, approvals and compliance evidence.

### Is an AI policy mandatory under the AI Act?

The regulation does not require every company to have the same AI policy document. However, deployers must control their uses, train relevant people, comply with applicable obligations and keep evidence. Article 95 also encourages voluntary codes of conduct, which makes a clear AI policy very useful.

### What is the difference between an AI policy and an AI register?

The AI policy sets the rules: what is allowed, rejected, reserved or subject to approval. The AI register describes the uses and tools actually used. Both must stay connected for governance to be verifiable.

### What does Compaia do after generating the policy?

Compaia connects your policy to declared tools, teams and uses. You can invite the relevant employees, send them useful rules and keep the evidence already available.

## Sources

- [AI Act - Article 95 on codes of conduct](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689#art_95)
- [AI Act - official text](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689)

## Related resources

- [AI Act art 95](https://compaia.eu/obligations/art-95)
- [Transparency](https://compaia.eu/transparency)
- [AI Literacy](https://compaia.eu/litteratie-ia)
- [Avoid AI risks in your company](https://compaia.eu/sanctions-ia-act)
- [AI Register](https://compaia.eu/registre-ia)