What the statement should explain
- Where AI is used in your product, service or internal workflow.
- Whether customer data is sent to AI systems.
- Whether AI outputs are reviewed by humans.
- Whether AI is used to make automated customer-impacting decisions.
- Which controls are in place for vendors, data and review.
- Who customers can contact with AI governance questions.
Bad version
“We use AI responsibly.” That says almost nothing.
Better version
“We maintain an inventory of AI uses, review AI vendors before adoption, restrict sensitive data entry into public AI tools, require human review for customer-facing outputs, and review our AI controls quarterly.”