Director or leadership
You are the one who will be asked what your organisation's rules on AI are.
This is you if you sign off on tools, budgets and risk, and nobody has written the rule down yet.
You will recognise this work
You approve tools, budgets, policy, and risk while staff are already experimenting under deadline pressure. Your job is not to know every model. It is to make the allowed route clear, affordable, reviewable, and safe enough that people will actually use it.
Outcomes you own
- A short rule staff can apply without asking for every routine task.
- An approved-tool register tied to data classes and accountable owners.
- A response process for mistakes, vendor changes, and tools the organisation can no longer afford.
Where AI helps, and where it stops
- AI can assist: compare public policy text, draft a checklist, or organize an inventory that a person has already cleaned.
- You decide: risk appetite, procurement, approved use, incident response, and who may authorize exceptions.
- Never delegate: decisions about a person’s rights, staff discipline, disclosure after an incident, or acceptance of vendor terms.
Your priority tasks
Tools matched to this role
Approve a workflow, not a logo. Include the account owner, renewal path, data class, reviewer, and manual fallback before paying for a license.
- Never for sensitive materialHas a free versionWorks in Iraq
- Only approved or redacted sensitive materialHas a free versionWe do not know whether it works in Iraq
- Only approved or redacted sensitive materialHas a free versionWe do not know whether it works in Iraq
- Only approved or redacted sensitive materialHas a free versionWorks in Iraq
Your data risks
Keep these decisions with leadership
- Do not approve a tool without knowing its data path, account owner, renewal cost, and removal process.
- Do not assume that switching off model training makes identifiable material safe to upload.
- Do not punish prompt incident reporting. A blame-first process hides the next incident.
Workshop path
- Run a no-blame inventory of tools, accounts, tasks, and material already in use.
- Classify three realistic workflows and assign an approved, manual, or prohibited route.
- Set the owner, incident contact, review date, and evidence required before a new tool is approved.
Leave with
A signed one-page AI use rule, an approved-tool register, and a dated review and incident process.
Prompts for this role
Long documents
Redact first
Turn a long document into a one-page brief
15 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Read the document below and write a brief for a colleague who has not read it. Rules: 1. Use only what is in the document. Add nothing from your own knowledge. If you are not sure whether something is in it, leave it out. 2. Every point must name the page, article or section it comes from. 3. Quote the exact wording for anything that could be disputed. 4. Copy every number and date in the digit form the document uses, and flag it where the document mixes digits: ١٢٣ alongside 123. 5. Do not soften and do not dramatise. Give me, in this order: A. What this document is, in one sentence: who wrote it, when, and what it decides or reports. B. The ten most important points, one line each, each with its page or section. Carry every number, date and deadline inside the point it belongs to, each with its own page. C. What the document does NOT say that a reader would expect it to. D. Three questions this document leaves open. Document: [PASTE THE DOCUMENT]
Laws and gazettes
Public material only
Compare two versions of a law and list what changed
30 minutes · Gives you a table
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Below are two versions of the same law, regulation or bill. Version 1 is the older one. Version 2 is the newer one. Rules: 1. Compare them article by article. Quote the exact wording on both sides. 2. Report only what changed. Do not summarise what stayed the same. 3. Say what each change does in practice, in one plain sentence. No political comment. 4. If an article was renumbered but its wording is the same, write RENUMBERED. Do not report it as removed. 5. Article numbers may arrive in mixed digits: ١٢٣ alongside 123. Treat ١٢ and 12 as the same article. 6. If a change is ambiguous, say so and give both readings. If neither version settles a point, write "the document does not say" instead of filling the gap. Give me, in this order: A. A table: article, wording in version 1, wording in version 2, what it changes in practice, who it affects. B. Articles removed or added. One line each, marked REMOVED or ADDED, with the article number and its subject. C. The three changes that most affect civil society organisations, and why. D. Anything you could not compare because the numbering differs. If you are reading on a phone, replace the table with one block per row: a heading line, then one short labelled line per column. Version 1: [PASTE THE OLDER VERSION] Version 2: [PASTE THE NEWER VERSION]
Reports and advocacy
Redact first
Draft a donor report section from your own notes
25 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Write one section of a donor report using ONLY the notes below. Rules: 1. Never invent a number, a place, a date or a beneficiary. If a figure is missing, write [NUMBER NEEDED] and carry on. 2. Copy every figure exactly as it stands in the notes. Do not round it, and do not replace it with a phrase such as "about 200". 3. Do not describe an activity that is not in the notes. 4. Report a target that was missed as a missed target, with the reason from the notes. Do not present it as a partial success. 5. Where two notes disagree, write both and say they disagree. Do not merge them into one sentence. 6. Plain language, short sentences. No promotional adjectives. Maximum [WORD COUNT] words. Structure: A. What was done in this period. B. Results against the indicator, answered as the indicator is written: [PASTE THE INDICATOR WORDING]. C. What did not go to plan, why, and what changes next period as a result. D. A list of every [NUMBER NEEDED] you wrote, so I can fill them in. Notes: [PASTE YOUR MONITORING NOTES]
Grants and admin
Redact first
Check whether your organisation can apply
20 minutes · Gives you a checklist · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Below is a call for proposals, and then five facts about my organisation. Answer only from the call. Rules: 1. For every answer, quote the clause you used and give its section number. 2. If the call does not answer something, write "the call does not say". Never fill a gap with what is usual. 3. If a clause turns on where we work or what we work on, do not guess. List it as a question for us to answer offline. 4. Do not encourage or discourage me. Report what the document requires. 5. Keep every date and figure exactly as the call writes it, including mixed digits: ١٢٣ alongside 123. Give me, in this order: A. Are we eligible: yes, no, or unclear, with the clause quoted for each requirement we meet or fail. B. Every deadline, with date, time and time zone as written, then a checklist of the required documents and annexes, one line each. C. Grounds for disqualification, and the budget rules that would change how we plan: co-financing, ineligible costs, ceilings, reporting. D. The questions we should send the donor, because the call does not answer them. The call: [PASTE THE CALL] My organisation, five facts and nothing more: Country of registration: [COUNTRY] Legal form: [LEGAL FORM AS IT IS WRITTEN ON OUR REGISTRATION] Years active: [UNDER 3 / 3 TO 10 / OVER 10] Last annual budget: [PICK ONE BAND, NOT THE FIGURE: UNDER 50,000 / 50,000 TO 250,000 / OVER 250,000, AND THE CURRENCY] External audit available: [YES OR NO]
Protecting information
Redact first
Draft your organisation’s one-page AI rules
30 minutes · Gives you one page
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Help me write a one-page rule for using AI tools in my organisation. Use only my answers below. Rules: 1. Do not ask me what our sensitive material is, and do not guess at it. I am not going to tell you. 2. In section A, leave the examples as blank numbered lines that we fill in on paper afterwards. Write the line, not the example. 3. Do not add rules I did not ask for, and do not write legal language. 4. Keep the whole page under 400 words, in words a new volunteer would understand. My answers: 1. What we do: [ONE SENTENCE] 2. Our three labels for material: public, internal, identifiable. Use these three words, and do not ask me what is in the third one. 3. Tools we have decided to allow: [LIST THEM, OR WRITE "NONE YET"] 4. Who decides when someone is unsure: [ROLE, NOT A NAME] Write one page, in this order: A. The three classes, in the order public, internal, identifiable, each with one line saying what may be done with material in that class, then two blank numbered lines for our own examples. B. The approved tools from answer 3, and what each one may be used for. If answer 3 says "none yet", write that no tool is approved yet, and what that means in practice. C. What to do when you are unsure, in one sentence naming the role from answer 4, then the four short fields to write down every time an AI tool is used on work material. D. One sentence we tell the people we serve, then a review date and the role that reviews it, as one blank line each for us to fill in.
Protecting information
Redact first
Make a redaction checklist before you paste anything
10 minutes · Gives you a checklist · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. I am about to work on a document in an AI tool. Before I do, help me decide what must come out of it. I am not going to paste the document. I will name its type. Rules: 1. Do not ask me to paste the document, and do not ask me for a sample of it. 2. Do not ask where the document came from or who else holds a copy. Neither one is needed for a redaction list. 3. Write for the type I picked. Do not write a general list that would fit any document. 4. Name what must be removed in the words that really appear on a page of this type, so I can find them by eye. The type of document, pick one: [AN INTAKE FORM / A WITNESS STATEMENT / A PAYROLL SHEET / A CASE LOG / A PARTNER REPORT / A MEETING RECORD] Who appears in it: [BY ROLE OR CATEGORY ONLY, NEVER BY NAME] What I want the AI tool to do with it: [DESCRIBE THE TASK IN ONE SENTENCE] Give me, in this order: A. What must be removed before a document of this type goes into any tool that is not on our own machine. B. The details people leave in that still identify someone once they are combined: a village name plus an age, a rare job title, the date of an event only a few people attended. List the ones that apply to this document type. C. What may stay because the task needs it, then the order of work, so a partly redacted copy is never saved over the original. D. How to check the redaction worked, including what to search for, such as mixed digits: ١٢٣ alongside 123, and then whether this task can be done at all with the material redacted, or whether it needs a route where nothing leaves our own machine.
Reports and advocacy
Public material only
Turn one finding into a press release and three posts
20 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Write a press release and three social posts about the finding below. Use only what I give you. The finding, in one sentence: [WRITE IT] The number, exactly as it must appear: [WRITE IT, WITH ITS UNIT AND ITS PERIOD] Where the number comes from: [OUR REPORT, ITS DATE, ITS PAGE] The quote, and the role of the person who said it: [PASTE THE QUOTE AND THE ROLE] What we are asking for: [THE ONE ACTION YOU WANT] What we have not established: [WHATEVER OUR MATERIAL DOES NOT PROVE] Rules: 1. Never change the number, its unit or its period. Do not round it, do not convert it, do not write it as a word. 2. Copy the digits as I typed them, whether they are ١٢٣ or 123. 3. Do not add a cause. If we did not establish why, do not explain why. 4. No adjectives that overstate: unprecedented, shocking, historic. 5. Keep the quote word for word. 6. If a detail is missing, write [MISSING] in the draft. Do not fill it in yourself. Give me, in this order: A. A press release: headline under 12 words, three short paragraphs, the quote, then the ask. B. Three posts, each under 240 characters, each carrying the number and the ask, no hashtags unless I gave you one. C. Every sentence that needs sign-off before publication, quoted, and who should sign it. D. The three questions a journalist will ask first, and whether our material answers them.
Translation
Public material only
Translate a donor call without shifting a requirement
15 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Below is a published call for proposals. Translate it into the language named above. Colleagues will decide what to apply for from your translation, so a requirement that shifts meaning is a lost application. Rules: 1. Translate the meaning in plain formal wording. Do not summarise, do not shorten, do not explain. 2. Copy every figure, date, time, time zone, percentage and currency exactly as written. Where the source mixes digits (١٢٣ alongside 123), keep each one in the form it appears. 3. Never make a requirement softer or firmer. "Must" stays "must", "may" stays "may", "encouraged" stays "encouraged". 4. The first time a requirement word appears (eligible, mandatory, co-financing, annex, deadline, audit, ceiling), put the English word in brackets after your wording. 5. Where the English can be read two ways, translate the more literal reading and mark it [CHECK]. Give me, in this order: A. The translation. B. Every [CHECK], one line each, saying what the two readings are. C. Every figure, date and deadline, one line each: the source wording first, then your translation of it, so I can compare them one by one. D. Every requirement word you chose a wording for, with the English in brackets. The call: [PASTE THE PUBLISHED CALL]
Transcription
Redact first
Turn messy meeting notes into checkable minutes
15 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. You are writing the minutes of a meeting from one person's rough notes. Work only from the notes below. Rules: 1. Never invent a decision. If the notes do not say a decision was taken, it was not taken. 2. Never assign an action the notes do not assign. Give one role per action, exactly the role the notes name, and where the notes name none write "No owner in the notes". 3. Never invent a date. Where the notes give no date, write "No date in the notes". 4. Copy names, figures and dates exactly as the notes write them. Do not correct them. 5. Anything you are unsure about goes in section D. Do not guess in A, B or C. 6. Keep every section short. One line per item. Give me, in this order: A. Decisions taken. One line each, with who decided it as the notes record it. Where the notes say only "the meeting", write that. B. Actions. One line each: what is to be done, the one role the notes assign it to, and the date the notes give. C. Discussed without a decision. One line each. D. Unclear in the notes. One line each: what is missing or contradictory, and which section above it would belong to. Notes: [PASTE YOUR NOTES]
Long documents
Redact first
Turn a long report into eight minutes for a board
15 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. I have eight minutes on a board agenda. Read the report below and write what the board needs, not a summary of the report. Rules: 1. Use only the report below. Add nothing from your own knowledge. 2. Every point names the page it rests on. A point with no page is removed, not kept. 3. Quote the report's own wording for anything a board member could dispute. 4. Copy every figure exactly as printed, including mixed digits: ١٢٣ alongside 123. 5. Do not soften and do not dramatise. Short sentences only. Give me, in this order: A. The three decisions this board must actually take, one line each, with the page each rests on and what happens if it is delayed. B. The two risks the report itself names, quoted, each with its page. C. What the report does not answer that a board will ask, as three questions. D. One slide of numbers: at most six figures, each with a label and its page. Report: [PASTE THE REPORT]
Laws and gazettes
Public material only
Draft a comment on a published draft law
25 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Below is a published draft law, and a list of the articles I want to comment on with my own published evidence for each. Write the comment I will submit. Rules: 1. Comment only on the articles I list. Add no other article, however weak it looks. 2. Use only the evidence I give you. Never invent a case, a figure, a date or a source, and never add an example of your own. 3. Where my evidence does not carry the point, write "Evidence missing" and the one line I would have to supply. 4. Quote the article's current wording exactly, then give the proposed wording in full, so the two can be read side by side. 5. Plain and formal. Propose wording. Do not argue about motive and do not accuse. Give me, for each article I list, in this order: A. The article number, its current wording quoted, and the exact wording proposed instead. B. The reason, in one sentence, naming which of my evidence lines it rests on. C. The effect on the people this article reaches, using only what my evidence says. Where my evidence does not say, write it as a question for me to answer before I submit. Then once at the end: D. Every "Evidence missing" line, gathered in one list. Keep the whole comment under one page. Draft law: [PASTE THE ARTICLES OF THE DRAFT LAW] Articles I am commenting on, and my evidence for each: [LIST EACH ARTICLE NUMBER AND ONE LINE OF YOUR OWN PUBLISHED EVIDENCE]
Grants and admin
Redact first
Answer the donor's questions from your own documents
20 minutes · Gives you short sections · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Below are a donor's clarification questions, then our own documents. Answer each question using only the documents. Rules: 1. Answer one question at a time, in the donor's order and with the donor's own numbering. 2. Under each answer, quote the one sentence from the documents that the answer rests on, and name the document and the page or section it came from. 3. If the documents do not answer a question, write "our documents do not answer this" and stop. Never fill the gap with what is usual, and never combine two documents into a fact that neither of them states. 4. If the documents answer only part of a question, say which part is answered and which part is not. 5. Four sentences at most per answer. No apology, no promotional language. Give me, in this order: A. The answers, numbered as the donor numbered the questions, each one with its quoted sentence and its source. B. The questions marked "our documents do not answer this", and for each one, which document or figure would answer it, so I can attach it. C. Anything in my documents that contradicts another part of my documents, both sentences quoted, with no attempt to resolve it. The donor's questions: [PASTE THE DONOR'S QUESTIONS] Our documents: [PASTE THE DOCUMENTS, ONE AFTER ANOTHER, EACH WITH A TITLE LINE]
Grants and admin
Redact first
Ask a donor for more time with no extra money
15 minutes · Gives you a message to send · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. Write a short message asking a donor to extend a grant with no additional funds. Use only the facts below. Rules: 1. No apology paragraph. State the position once and do not repeat it. 2. Never promise anything that is not in the facts below. Do not add an activity, an output, a date or a figure. 3. Where the message needs a figure, a date or a reference I have not given you, write [I MUST FILL THIS IN] and carry on. 4. Give the reason in one factual sentence. No blame and no dramatic language. 5. Under 250 words. Short sentences. One request, stated plainly. Give me, in this order: A. The message, with a subject line, and inside it, in this order: what is complete, what is not complete and why in one sentence, the new end date, what will be delivered by that date, and what changes in the workplan. B. A list of every [I MUST FILL THIS IN] you wrote, so I can complete it. C. What to check in the grant agreement before I send this, as a short list: the notice period, who has to sign, and whether the donor requires a formal amendment request instead of a message. The facts: What is complete: [LIST WHAT IS FINISHED] What is not complete: [LIST WHAT IS NOT FINISHED] The reason, in one sentence: [WRITE THE REASON] Current end date: [DATE AS WRITTEN IN THE AGREEMENT] New end date requested: [NEW DATE] What will be delivered by the new end date: [LIST WHAT WILL BE DELIVERED] What changes in the workplan: [LIST WHAT CHANGES]
Protecting information
Controlled route
Write an incident log entry from rough notes
10 minutes · Gives you short sections
Do not paste this into a cloud tool.
Answer in [ANSWER LANGUAGE], even if the material below is in another language. This tool is running on my own computer and nothing I paste here leaves it. I have rough notes about something that happened, and I need a log entry that still makes sense when it is read months from now. Rules: 1. Use only what is in my notes. Add no cause, no motive, no conclusion. 2. Do not assign blame, and do not say whether what was done was right or wrong. 3. Use only the roles I give you. Write no names, and if a name appears in my notes, replace it with the role. 4. Copy every time and date exactly as I wrote it, including mixed digits: ١٢٣ alongside 123. If a time is missing or approximate, write it as approximate. 5. Anything unclear, contradictory or missing goes in section D. Do not resolve it yourself. 6. Short sentences, past tense, no adjectives that judge. Give me, in this order: A. What happened, as a numbered sequence with the time at the start of each line, and what was done in response on the same line. B. Who was informed, by role, and when each one was informed. C. What is still open, one line each, and who is holding it, by role. D. What is uncertain: missing times, gaps in the sequence, statements that conflict, and anything I wrote that can be read two ways. The roles I use: [LIST THEM BY ROLE, FOR EXAMPLE: the field officer, the office manager, the driver on duty] My notes: [PASTE YOUR ROUGH NOTES]
Protecting information
Public material only
Write a one-page AI note for your colleagues
15 minutes · Gives you one page · Works on a phone
Answer in [ANSWER LANGUAGE], even if the material below is in another language. I direct a civil society organisation. My colleagues have already started using AI chatbots for work, and there is no note telling them what is allowed. Write that note, addressed to them. What I will tell you, and nothing else about us: 1. The role people ask when they are unsure: [ROLE, FOR EXAMPLE THE PROGRAMME MANAGER, NEVER A PERSON'S NAME] 2. Tools we have decided to allow: [LIST THEM, OR WRITE "NONE DECIDED YET"] Rules: 1. Do not ask me what material we hold, and do not ask me to describe it. Write the three classes in general terms, give one everyday office example of each, and say in the note that I will replace your examples with our own. 2. Under 350 words in total. 3. Words a new volunteer understands. No legal wording and no policy vocabulary. 4. Every rule must be one a person in a hurry can follow without asking a second question. 5. Write "AI tool", and name no tool other than the ones I listed above. Give me, in this order: A. The three classes of material and what may be done with each: may go into an allowed tool, may go in only after names and identifying details are removed, never goes into any AI tool. One everyday office example each. B. The two things that must never be pasted, each as one short sentence on its own line. C. Who to ask when unsure, using the role I gave you, and what to write down every time an AI tool is used on work material, as four short fields. D. The sentence a colleague says to a person whose material was involved, in plain words that admit what we do not know. End with one line: the date I should read this note again with my colleagues.
Case studies
A global mapping of AI in transitional justice names Colombia 25 times and Iraq none
Impunity Watch · Global, 2025
3 minutesA Sorani Kurdish name-tagging dataset is now openly licensed, and its labels were made by matching a word list rather than by hand
Charmo University · Iraq, 2025
4 minutesA Qatari court barred confidential material from public AI tools
QICDRC · Qatar, 2025-2026
2 minutes
Recipes
- Controlled route for sensitive material60 minutes
- Only approved or redacted sensitive material90 minutes
- Only approved or redacted sensitive material240 minutes
Last checked: 2026-09-01