AI Foundations
For businesses that already use AI and need fixed rules and a list of their AI systems.
- AI acceptable use policy (.docx + .md)
- AI system inventory (.xlsx + .md)
Choose whether to begin with AI rules or with an approval process for new tools. Each package has two templates that you download and adapt.
Each template is an editable Word or Excel file, plus a Markdown file for use with an approved AI system.
The templates currently on sale are in German. Changing the website language does not change the language of the download files.

| You need clear rules and an overview | AI Foundations |
| You need to assess new AI tools | Assess and Approve AI Tools |
| You need to manage risks and incidents | AI Risks and Incidents |
| You need employee training and records | Document AI Literacy |
| A good fit | 10–250 employees; ChatGPT, Copilot or AI features in standard software; initial documentation is missing. |
| A different solution is needed | Your own high-risk AI, medical devices, biometric systems or formal ISO 42001 certification. These require qualified advice. |
| What you receive | An editable foundation for your first AI governance steps and internal review, not certification or legal advice. |
For businesses that already use AI and need fixed rules and a list of their AI systems.
Make and document informed decisions before introducing new AI tools or features at work.
Monitor AI risks and follow a clear process when something goes wrong in day-to-day work.
Provide understandable employee training and keep clear records of the AI literacy covered.
Each package: two templates in their main editable formats, plus two Markdown working versions.
Legal basis: Regulation (EU) 2024/1689, including the Digital Omnibus (in force since 27 July 2026). File status: September 2026.
Template prices: any VAT due is shown in the Gumroad checkout before you buy.
Use Markdown files only with an AI system approved by your company. Remove or anonymise personal, confidential and sensitive information first.
AI Basics and Review and approve AI tools in one purchase: first rules and an overview, then a traceable approval process for new tools.
Both packages separately: €88, you save €19
Files as .docx and .xlsx for editing, plus a Markdown working version of each. The documents refer to each other and use the same terms.
A larger bundle with more templates will follow later. It is meant to include several connected documents, an implementation guide and proof of AI literacy.
Structured working aids with a preliminary check. Not legal advice and not a final high-risk classification.
Use within your own company. No sharing and no resale. A licence for consultants will follow separately.
Only in an AI system approved by your company, without confidential or personal data. Always review the results as a human.
We answer questions about your purchase by email at feedback@pryvan.com, usually within 2 working days.
If you lack clear rules and an overview of your AI tools, start with AI Basics. If you want to review a specific new tool, choose Review and approve AI tools.
No. You adapt each template to your company. A completed example shows what it can look like.
For working with an AI system approved by your company. Remove confidential and personal data first.
No. The templates are working aids for internal preparation. Have key documents reviewed internally or by a specialist.
In-depth templates for data protection impact assessments, vendor reviews, contracts and more demanding AI systems.
Full AI DPIA, data processing agreement, vendor contract clauses and detailed transfer and subprocessor reviews.
Fundamental rights impact assessment, technical documentation, quality management and conformity assessment preparation.
Gap analyses, statement of applicability, control evidence and an implementation roadmap for a formal AI management system.
OWASP LLM review, model validation, agent approval, bias and fairness testing, and model documentation.
Governance committees, management and board reporting, maturity assessments and international regulatory monitoring.
These templates are practical completion guides, not legal advice. Have key documents reviewed internally or by a specialist before implementation.