Policies

Workforce policies enable you to define policies for managing access to AI platforms. These policies act as monitors that detect when Workforce resources attempt to access or use an AI platform, and perform an action to manage the use of that platform.

1. In the side menu, go to AI and under Workforce select Workforce Policies.
2. Click Create Workforce Policy.
3. Select the scope under which this policy should block or manage AI usage.
4. Enter a name for your policy (e.g., "DeepSeek usage policy").
5. Enter a description for your workforce policy.
6. Choose the AI platforms that your policy will monitor.
7. Capabilities: Configure enforcement levels for each available capability supported by your selected platforms. Certain capabilities support guardrails that enable inline content blocking to enhance security and compliance. The supported capabilities include:
   • Chat Completion - The ability for the selected scope to send messages to any of the selected platforms.
   • File Upload - The ability for the selected scope to upload files to any of the selected platforms.
   • Image Generation - The ability for the selected scope to generate images on any of the selected platforms.
   • Website - The ability for the selected scope to visit any of the selected platforms.
8. Enter a message to display to the employee when your workforce policy takes action.

Depending on which Workforce Policy type you select, your policy may also require one or more of the following criteria:

• Redirect URL - Enter the URL which your workforce policy should redirect a employee to after blocking their access to one of the selected platforms.

Platform Rules

Platform rules allow you to more easily view the enforcement level applied to each platform within the selected scope, and which workforce policies are applying them.

Available scopes include:

• Global - Rules applied to every employee, group, device, and project.
• Employee - Rules applied only to a specific employee, including those applied globally.
• Device - Rules applied only to a specific device, including those applied globally.
• Group - Rules applied only to a specific group, including those applied globally.
• Project - Rules applied only to a specific project, including those applied globally.