# GOV-04 Acceptable Use Policy

Domain: GOV Governance & Accountability · HI-AAF v1.3 · Public review · https://humanintel.net/standard/gov/gov-04

An AI Acceptable Use Policy is approved at executive level and acknowledged by all personnel involved in agent development, deployment, or operation.

The organization has a written AI Acceptable Use Policy that has been formally ratified by executive leadership and acknowledged by every individual involved in the agent lifecycle: development, deployment, and operations. The policy sets boundaries on what agents may be used for, how they may interact with customers and systems, and the obligations of personnel working with them.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for GOV-04: Policy is published and accessible; acknowledgment records exist for all relevant personnel; the policy has been reviewed and re-ratified within the prior twelve months.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Policy is published and accessible.
- Acknowledgment records exist for all relevant personnel.
- The policy has been reviewed and re-ratified within the prior twelve months.

## Framework mappings

- NIST AI RMF: MAP 1.1, MAP 5.1
- ISO/IEC 42001: 6.1.2, A.5
- SOC 2 (TSC): CC3.1, CC3.2
- EU AI Act: Art. 9(2), Art. 9(4)
- Singapore: MAIGF Internal Governance, AI Verify Accountability

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, GOV-04 Acceptable Use Policy. Public review edition, July 2026. https://humanintel.net/standard/gov/gov-04