The company doesn't need to have approved anything: a browser is enough. The question isn't whether they're using it, it's what they're pasting into it. This puts the rules in writing and makes them enforceable.
A salesperson pastes the entire price list so it can draft a proposal for them.
HR uploads twelve candidates' résumés to get them summarized.
Accounting pastes a customer's account statement to understand a discrepancy.
None of them did anything out of malice. Nobody told them no, or what they could do.
The company didn't decide to adopt AI. Employees adopted it, one by one, without telling anyone.
ID numbers, addresses, amounts, account statements. Pasted into free tools whose terms nobody read. In Panama, personal data is regulated by Law 81 of 2019, and that law applies just the same if the person who moved the data was a well-meaning employee.
AI sometimes answers with total confidence something that is false. If nobody defined what must be checked before using an answer, sooner or later one of those reaches a customer.
Corporate clients, banks and insurers are already including the question in their vendor forms: do you have an AI usage policy? Whoever doesn't have one writes it in a rush, and it shows.
Here's the sensitive part: if something goes wrong, the liability is the company's, not the employee who pasted the data. And today there's nothing in writing that says what was allowed.
Who can use AI, for what, with what information, what's prohibited and what has to be checked before sending something to a customer. Written so your people understand it, not a lawyer.
Most policies get signed and archived. This one comes with team training and with the rules expressed as concrete cases from your operation, which is the only thing people remember.
Banning it doesn't work: people use it anyway, just in secret and worse. What it does is open a safe lane — this, yes, with this information, this way — so nobody has to hide.
We'll say it clearly: we're not lawyers. The policy is drafted in line with Law 81 of 2019 and market best practices, and it's ready for your legal advisor to review and sign. If you want, we coordinate that review.
We'll tell you straight, because making up an ROI here would be lying to you.
A customer data leak costs you the customer, the relationship and regulatory exposure. Avoid just one, and this has already paid for itself many times over.
Banks, insurers and corporations are already asking for an AI policy in their vendor forms. Without one, you're out before they even evaluate you.
Shadow AI goes away. People know what they can do and they do it openly, which is when it becomes productive.
It's the only service in the catalog that we recommend having before signing up for any other. Even if in the end you don't hire us.
The hard part isn't the writing. It's finding out what's really happening today, without anyone feeling accused and starting to hide things.
Short interviews by department to learn which tools are being used and with what information. It's framed from the start as an exercise to get organized, not to punish: if people feel they're being audited, they lie and the work is useless.
What's public, what's internal and what never leaves. With the specific data of your operation, not textbook categories. This is where 80% of the policy gets defined.
The document in plain language, the two-hour session with the team on cases from your company, and a date to review it. An AI policy without periodic review is outdated within a year, and we put that in writing.
That's it. You pay once, you keep the document and it's yours. No options to choose and no fine print.
A single payment. The document and the training included.
No monthly fee, now or later
If you're going to set up several AI services, the AI Governance Package includes this plus extended training and first-year support, for $1,990. You get a better deal there.
No, and we're not going to dress it up as such. We're not lawyers. We draft the policy in line with Law 81 of 2019 and market best practices, and it's ready for your legal advisor to review before signing it. We always recommend that step.
It's especially useful in that case. Today the risk doesn't come from the AI the company hired — that one is under control — but from the AI your people are already using on their own.
It depends entirely on how it's framed, and that's why we're careful with it. The mapping is done to get organized, not to sanction anyone for what they did before. When it's framed as a witch hunt, people lie and the work is useless.
We recommend reviewing it every 12 months, and the date is written into the document. This field moves fast: a policy from two years ago doesn't cover even half of what exists today.
Because a client who adopts AI without rules ends up with an incident, and that incident splashes back on us too. We prefer clients who stick around. We recommend it even if you buy the rest from someone else.
We review which tools are being used, with what information and how exposed you are. If your exposure is low, we tell you and we don't sell you anything.
$1,490 one time. No monthly fee. Document and training in 15 business days.
Order nowYou're talking to Génesis, Valtriom's AI