Your AI policy, in one calm place.
Upload the policy you have. Grasp turns it into rules, asks everyone to confirm them, and keeps every version on record. Part of Grasp Govern, the add-on to Grasp Work.
And everyone confirms it, where they work.
3 rules Grasp found in it
Client files never go into public AI tools.
Microsoft Copilot and ChatGPT Enterprise are approved.
The CISO approves a new tool, after a check by IT.
212 of 230 people confirmed version 2
From a PDF to a policy people live by.
Upload the policy you already have.
Upload
PDF, Word or text. Grasp reads it and proposes the rules in it. You keep each one, or leave it out.
Rules Grasp proposes
Everyone confirms it, where they work.
Confirm
Grasp asks each person to confirm the current version, in Pulse (a small app on company laptops) or in Slack or Teams, and reminds those who have not.
212 of 230
confirmed version 2 of the AI and data guideline.
164in Pulse
48in Slack or Teams
18not yet, reminded Monday
Every version, and what changed.
Version
A new version is signed off by a named person. You see what changed, and everyone confirms again.
What changed
Microsoft Copilot. Nothing else is approved yet.
Microsoft Copilot, and ChatGPT Enterprise for drafts without client data.
Signed off by Fleur van Leeuwen, COO18 Sep · everyone asked to confirm againVersion 1 · 25 Aug, from the vision conversation
A record of everything.
Record
Every upload, sign-off, confirmation and exception, with who and when. Nothing is ever removed.
Eva Bakker asked to use Perplexity with a client fileFleur van Leeuwen signed off version 2The records your auditor asks for.
Every policy version, sign-off, confirmation and exception in one place, exported in minutes. What an ISO 27001 auditor may ask for, and what the EU AI Act’s AI literacy duty may require.
Common questions
Who decides on a new tool or an exception?
A named person, usually in IT or security. Grasp prepares the evidence and keeps it with the decision.
Where do the rules come from?
From the policy you upload, or from the governance questions in the first conversation. Grasp proposes them, you keep or leave out each one.
How do people confirm the policy?
On their laptop through Pulse, or in Slack or Teams. Grasp reminds those who have not, and records who confirmed which version and when.
Does Grasp map us to ISO 27001 or the EU AI Act?
No, Grasp does not map your controls to a framework. It keeps the records an audit asks for: every policy version, sign-off, confirmation and decision, with its sources, ready to export.