Strategy, people & care
Let your team use AI, without leaking what matters.
A plain-language AI policy, clear data rules and the technical controls behind them, so useful work is not blocked and confidential information stays put.
At a glance
AI policy, security & governance
- A policy people will actually read
- Data classified into simple tiers
- Technical controls, not only paper
- Reviewed as tools change
Delivered from New Baneshwor, Kathmandu, on-site across the valley and remotely across Nepal.
In short
What is an AI usage policy?
An AI usage policy is a short document that tells staff which AI tools they may use, what information they must never put into them, how to check AI output before relying on it, and who is accountable. AI governance is the wider set of controls around that policy: approved accounts, access rights, logging and review. Bit Microsystems helps organizations in Nepal put both in place, in plain language, without blocking useful work.
What is included
Everything needed to make it work in practice
One team covers the full job, so there are no gaps between suppliers.
Current usage survey
We find out which AI tools staff already use, on which accounts and with what data. The answer is usually more than management expects.
Data classification
Your information sorted into a few clear tiers, each mapped to the tools it may and may not be used with.
Written AI policy
A short policy in plain English, with a Nepali summary, that staff can follow without a lawyer.
Technical controls
Company accounts in place of personal ones, admin settings configured, and a private local AI for data that must not leave.
Staff briefing
A session that explains the rules and the reasons behind them, with real examples.
Periodic review
The policy and settings are revisited as tools, terms and regulations change.
Where it is used
Who this helps, and how
Typical situations we design for in Kathmandu and across Nepal.
Banks and financial institutions
Clear rules for customer and transaction data, and a private option for work that cannot use foreign cloud services.
Law and accounting firms
Client confidentiality protected while staff still benefit from AI for drafting and research.
Hospitals and clinics
Patient information kept out of public AI tools, with a safe alternative for clinical paperwork.
NGOs and outsourcing companies
Evidence for donors and overseas clients that AI use meets their data-protection requirements.
How we work
From first conversation to a system your team uses
- 01
Discover
A survey and interviews to learn how AI is used today.
- 02
Classify and draft
Data tiers and a draft policy, reviewed with your management and legal adviser.
- 03
Implement
Accounts, settings and safe alternatives put in place.
- 04
Brief and review
A staff session, then scheduled reviews.
Is it right for you?
An honest fit check
We would rather tell you now than after you have paid for the wrong thing.
A good fit if
- Staff are already using AI tools and nobody has set any rules.
- You handle client, patient, financial or donor data.
- A client, donor or regulator has asked how you control AI use.
- You want to encourage AI use, but safely.
Probably not the right choice if
- You want to ban AI entirely. Bans tend to push usage onto personal accounts where you cannot see it, so we will recommend a safe route instead.
- You need a formal legal opinion. We are not a law firm, and we work alongside your legal adviser.
Tools and technology we work with
Questions
Frequently asked
Straight answers to what people ask us most about this service.
Is it safe to put company data into ChatGPT?
It depends on the account and the data. Free and personal accounts may use conversations to improve the provider’s models unless that setting is switched off. Business plans generally commit not to train on your data by default. Either way the data leaves your organization, so truly confidential information belongs in a private, local AI instead.
What should an AI usage policy include?
At minimum: which tools and accounts are approved, what categories of information must never be entered, the requirement to check AI output before using it, rules for disclosing AI use to clients, and who to ask when unsure. Two pages is usually enough.
Do we need a policy if only a few people use AI?
Yes, and it is easier to set one now than after an incident. It takes one person pasting a client contract into a personal chatbot account to create a problem.
Which laws apply to AI use in Nepal?
General laws still apply to AI use, notably the Individual Privacy Act, 2075 (2018), which governs how personal information is collected, stored and shared, together with sector rules from your regulator and any contractual duties to clients or donors. Nepal has also been developing national AI policy. This is general information, not legal advice, and we work alongside your legal adviser.
How do you stop staff using personal AI accounts for work?
Mostly by giving them something better: approved company accounts that are easy to use, a private AI for sensitive material, and a clear explanation of why it matters. Technical restrictions help, but people follow rules they understand.
Related
Often combined with
Start a conversation
Thinking about AI policy, security & governance?
Tell us what you want to achieve and what you have today. We will reply with a clear plan, a realistic timeline and an estimate.