← TPN pack

Security Policy Templates

Ready-to-adopt written policies for MPA / TPN readiness, pre-filled with your studio name. The MPA Best Practices expect these in writing. Review, edit to your studio, and adopt - then they cover the policy controls in your assessment.

Information Security Management Policy

OR-1.0

Acceptable Use Policy

OR-1.1

Access Control Policy

TS-1.7

Incident Response Policy

OR-4.0

Data Classification & Handling Policy

OR-1.4

Business Continuity & Disaster Recovery Policy

OR-1.2 / OR-1.3

AI / Machine Learning Use Policy

OR-5.0

Vulnerability & Patch Management Policy

TS-4.0

AI / Machine Learning Use Policy

MPA OR-5.0

Download .txt

Studio - AI / Machine Learning Use Policy
Effective: 21 July 2026

1. AI features (resume parsing, document OCR) may process documents only for the stated business purpose; client content is never sent to third-party AI without approval.
2. Sensitive identifiers are masked (e.g. Aadhaar to last 4) and AI-extracted fields are confirmed by a person before saving.
3. The AI provider is chosen to avoid training on our data where possible; AI can be disabled entirely via the platform kill switch.
4. AI use is logged and reviewed; staff are made aware of these limits.