AI Policy Profiles

Predefined policy rules for every field

Choosing allow, block or controls for 18 categories and 165 subcategories across 18,548+ AI tools can be daunting. Every profile below gives a recommended verdict for every AI tool domain, so a Shadow AI Audit finding tells you not just what was found, but what to do about it.

15profiles
165subcategory rules
18,548domains with a verdict
13risk flags checked
Run a Free Audit Pricing
Choose a profile

Each profile assigns a Block, Allow with controls, or Allow verdict

Based on category, subcategory, risk flags and the vendor's training terms. Every profile is included with every Shadow AI Audit report.

Choose a profile. The counts, category defaults and sample rules below change with it.
Business MSP K-12 Universities Healthcare Banking Insurance Legal Government Defense Accounting Manufacturing Software Agencies Pharma
Showing profile

Marketing, media & creative agencies

Agencies, studios and media companies that live on generative image, video and copy tools.

Let the creative stack run. Block the abusive generators and keep client briefs out of training data.

1,349domains to block
11,200allow with controls
5,999allow
Agents & Automation
Agencies default: Allow with controls
AI workflow automation: Allow with controls (6260) General autonomous agents: Allow with controls (4390) Personal AI assistants: Allow with controls (3363) RPA with AI: Allow with controls (2463) Agent-building frameworks: Allow with controls (1430) MCP servers & integrations: Allow with controls (1346) +2 more subcategories
Audio, Voice & Music
Agencies default: Allow
Text-to-speech: Allow (694) Speech-to-text & transcription: Allow (496) Real-time voice agents & phone AI: Allow (367) Music generation: Allow (321) Podcast tools: Allow (311) Voice cloning: Allow with controls (288) +4 more subcategories
Business & Vertical
Agencies default: Allow
Finance & accounting: Allow (1071) E-commerce: Allow (971) HR & recruiting: Allow (677) Healthcare & med-tech: Allow (490) Government & public sector: Allow (314) Legal: Allow (233) +6 more subcategories
Code & Development
Agencies default: Allow
Code assistants & autocomplete: Allow (1049) Documentation: Allow (1030) Autonomous coding agents: Allow (863) API dev assistants: Allow (669) Debugging & error monitoring: Allow (481) Testing & QA: Allow (463) +6 more subcategories
Customer Support
Agencies default: Allow
Support chatbots & AI helpdesk: Allow (1217) Conversational commerce & messaging bots: Allow (671) Ticket routing & agent-assist: Allow (533) Voice & call-center agents: Allow (393) Review management: Allow (64)
Data, Analytics & Research
Agencies default: Allow with controls
Market & competitive intelligence: Allow with controls (2977) Predictive analytics & forecasting: Allow with controls (2370) BI & natural-language analytics: Allow with controls (1390) Document data extraction: Allow with controls (1258) Data cleaning & prep: Allow with controls (950) Survey & feedback analysis: Allow with controls (860) +4 more subcategories
Design, 3D & Creative
Agencies default: Allow
UI/UX design assistants: Allow (1337) AR/VR content: Allow (683) Game-dev AI: Allow (609) 3D model & asset generation: Allow (603) Fashion design & virtual try-on: Allow (306) Font & typography: Allow (255) +1 more subcategories
Education & Learning
Agencies default: Allow
AI tutors & personalized learning: Allow (1045) Course & curriculum creation: Allow (454) Quiz, flashcard & study: Allow (369) Grading & feedback: Allow (264) Kids' learning & STEM: Allow (234) Language learning: Allow (204) +1 more subcategories
Image & Visual
Agencies default: Allow
Text-to-image: Allow (1515) Graphic design & layout: Allow (1027) Image editing & inpainting: Allow (865) Illustration & character: Allow (586) Avatars & headshots: Allow (486) Background removal: Allow (288) +7 more subcategories
Lifestyle & Entertainment
Agencies default: Allow with controls
AI companions & character chat: Block (557) Gaming & AI-native games: Allow with controls (295) Dating & relationships: Block (241) Mental wellness & journaling: Allow with controls (220) Astrology & fun generators: Allow with controls (199) Health, fitness & nutrition: Allow with controls (120) +5 more subcategories
Marketing, Sales & SEO
Agencies default: Allow
Product marketing: Allow (1857) SEO & GEO optimization: Allow (1206) Sales prospecting & SDR agents: Allow (1096) Ad creative & optimization: Allow (1038) Social media management: Allow (1026) Email marketing & personalization: Allow (1006) +4 more subcategories
Models & Infrastructure
Agencies default: Allow with controls
Hosting & inference platforms: Allow with controls (620) Foundation models & model APIs: Allow with controls (523) Fine-tuning & training: Allow with controls (436) LLM gateways & routing: Allow with controls (326) Observability & evals: Allow with controls (248) Local runtimes: Allow with controls (238) +6 more subcategories
Productivity & Collab
Agencies default: Allow
Meeting assistants: Allow with controls (2698) Document drafting & office copilots: Allow (2248) Task & project management AI: Allow (2134) Email management & triage: Allow (587) Calendar & scheduling: Allow (308) Presentation & slide generation: Allow (278) +2 more subcategories
Robotics & Embodied AI
Agencies default: Allow
Robotics platforms & foundation models: Allow (58) Computer-vision & edge vision: Allow (30) Wearables & AI hardware: Allow (24) IoT & smart-home AI: Allow (17) Autonomous vehicles & drones: Allow (16)
Search, Knowledge & Docs
Agencies default: Allow
AI search & answer engines: Allow (433) Enterprise search & KM: Allow (216) RAG platforms & retrieval infra: Allow (177) Chat-with-documents & PDF: Allow with controls (105) Browser copilots & reading assistants: Allow (50) Note-taking & second brain: Allow (28)
Security & Detection
Agencies default: Allow
AI for cybersecurity: Allow (315) Identity verification: Allow (144) Fraud detection: Allow (135) Privacy & PII redaction: Allow (89) AI-content detectors: Allow (21) Deepfake detection & forensics: Allow (20) +1 more subcategories
Text & Language
Agencies default: Allow
General assistants & chatbots: Allow (3358) Writing & long-form: Allow (1752) Copywriting & marketing copy: Allow (1397) Summarization: Allow (977) Translation & localization: Allow with controls (974) Grammar, style & proofreading: Allow with controls (813) +6 more subcategories
Video
Agencies default: Allow
Text-to-video: Allow (1107) AI video editing: Allow (840) Animation & motion graphics: Allow (529) Dubbing, lip-sync & translation: Allow (440) Short-form clip repurposing: Allow (440) Talking avatars & presenters: Allow (281) +4 more subcategories
Block keep it off the network Allow with controls enterprise or SSO tier, no-training terms, logging Allow fine on default settings

Apply this profile to your own network

Run a free Shadow AI Audit and every tool it finds gets a verdict under the profile you pick.

Run a Free AuditSee plans
FAQ

Questions before you deploy

What is an AI policy profile?

A recommended action for every AI tool: Block, Allow with controls, or Allow. One profile per audience, from MSPs to healthcare, legal and defense.

How is the verdict decided?

From fields every AI tool domain already carries: category and subcategory, risk rating, data-sovereignty exposure, abusive-purpose flag, and the vendor's stated position on training with user data.

How does this connect to my Shadow AI Audit?

Every tool your audit finds already carries these same fields. Pick a profile and the report shows how many findings would be blocked, controlled or allowed under it.

My sector is not listed

Start from General Business. Contact us if you need a profile for your specific sector.