The renewal application now asks about AI. Most small businesses have nothing written down.
Cyber and E&O applications in 2026 ask whether the business keeps an inventory of its AI tools, has a written AI use policy, checks AI output before it reaches customers or staff, and can show the evidence. Answering no can mean a higher premium or an exclusion. Answering yes without the documents is a problem at claim time.
What the AI Governance Packet is
- AI Tool Inventory. Every AI tool and every AI feature inside other software: vendor, purpose, the data it receives, owner, access control, retention, and what the vendor's terms say about training on your data.
- AI Acceptable Use Policy. Approved tools, prohibited uses, information rules, human review, decisions about people, customer disclosure, incidents, security, content, continuity, and the state and federal clauses that apply to you, each with the official source to verify. Appendix B maps every section to the NIST AI Risk Management Framework (Govern, Map, Measure, Manage), the framework Texas's 2026 AI law names as a defence when followed in substance.
- Human Review Evidence Log. The governance record, acknowledgments, training, review log, incident log and decision register, opened on the day the policy is adopted.
- Renewal Crosswalk. Thirty-six questions carriers commonly ask, the answer your business can give today from its own records (yes, partial, or no with the remediation scheduled), and where the evidence sits.
Pricing
| Packet, one time | Update plan | Partner plan |
|---|---|---|
|
$299 Delivered within two business days of your intake answers. |
$39 a month Revised policy and crosswalk when a listed rule changes; renewal reminders. Optional. |
$199 a month Brokers and IT providers: packets for every client under your own name. |
Order the packet ($299) Partner plan ($199 a month)
How it works
- Complete checkout. Within the hour you receive the intake form by email: five short questions about your tools, your states, who is accountable, and how AI touches decisions and customers.
- Reply with the answers. A few lines each is fine; no call is needed.
- Within two business days the packet arrives as printable HTML and editable text, with the crosswalk for your renewal.
See a finished packet
A complete sample for a fictional dental practice: open the sample packet. Not sure where you stand? Run the two-minute readiness check.
Questions
Is this legal advice? No. The packet documents your own practices in the form carriers ask for. Every jurisdiction summary names its research confidence and the official source to verify.
What if we do not have a control in place? The packet says so honestly, schedules the remediation in the evidence log, and the crosswalk shows "partial" with the plan, which carriers accept far better than a blank.
Which states are covered? The federal baseline for everyone, and state clauses for California, Colorado (SB 26-189, effective January 2027), Illinois, New York (including New York City), Texas (TRAIGA, in force since January 2026) and Utah, plus EU transparency rules on request. Other states receive the federal baseline and a note. Summaries were last reviewed in October 2026 and each names its research confidence.
Who is behind it? Workshop Media Co., Washington State. Reply to any email from us or use the contact page.