AI Strategy and AI Policy

EXPLAIN TO START: strategy defines the vision and goals (what to achieve), and policy establishes the rules and safeguards (how to operate safely).

AI strategy (and vision) is the overarching thing… within that will be the AI policy as well as governance systems.

TO BUILD A SUCCESSFUL AI STRATEGY:

(1) Establish a clear vision: Integrate AI initiatives with your overall business strategy, aligning them with strategic priorities and identifying specific areas where AI can drive value.

(2) Prioritize the right use cases: Evaluate potential AI applications based on their potential business value, feasibility, and actionability.

(3) Measure and track progress: Define clear metrics to assess the performance of your AI initiatives throughout their lifecycle.

GATHER FEEDBACK FROM TEAM – roadblocks? current use of AI, etc

Try not to stifle innovation however.

AI POLICY REQS: assessing AI needs and goals, creating a governance framework, educating employees, monitoring AI performance, and instituting regular reviews and updates. Address core values and legal obligations, regular bias reviews and audits, Transparency with your employees

CREATE POLICY:

1. Clarify purpose and goals

2. Explain scope and communication (Who does the policy cover? etc)

3. Create specific AI use guidelines (based on guiding ethical principles) 

4. Address management and governance

5. Build a review and feedback process

6. Provide training and ongoing education

ETHICAL PRINCIPLES:

Transparency/Explainability/Auditability
Safety/Security
Robustness/Reliability
Justice/Equity/Fairness/Non-discrimination
Privacy
Accountability/Liability

COMPLIACE AND REGULATORY ENVIRONMENT:

gdpr,  The Fundraising Regulator‘s guidance accompanying the updated Code of Fundraising Practice — which came into force in November 2025 — requires charities to develop and agree an AI policy before using any AI tools to support fundraising, and recommends publishing that policy on their website to maintain trust and transparency with donors.  

AI STRATEGY:

Create a simple map of your organisation’s core functions:

• Service delivery
• Fundraising and supporter engagement
• Communications
• Back‑office operations
• Data and impact measurement
• Governance and safeguarding
• Volunteer management.

For each area, consider:

• Where could AI create efficiencies or improvements?
• Where could it introduce risk?
• Where are we already using AI without realising (e.g., CRM tools, social media algorithms, donor analytics)?

risks to consider:

• Safeguarding (deepfakes, impersonation, misinformation)
• Bias and fairness (AI tools disadvantaging certain groups)
• Data privacy and security
• Digital exclusion
• Reputational risk
• Staff confidence and wellbeing.

INITIALLY: 

5. Run Small, Safe, Low‑Cost Experiments

Avoid the temptation to transform everything