A practical policy template and audit process for teams using AI tools without formal oversight. Covers tool inventory, risk classification, data handling rules, and a quarterly review checklist. Written for marketing and ops leaders, not legal departments.