For privacy, FOIP/ATIP, legal, and risk staff
Know where your AI policy is weak — before it becomes a privacy or trust issue.
Your job is defensibility. When a resident, journalist, or Information & Privacy Commissioner asks how the city governs AI, you need a documented answer with cited sources — not screenshots. Got AI Policy gives you that reference layer for every Canadian municipality we can verify.
What hurts today
- You inherit AI use that predates any policy.
- You need to advise on risk without a Canadian baseline to compare against.
- Provincial privacy law applies, but there's no municipal equivalent to point staff at.
- Vendor claims and staff practice don't always match the written policy.
- You need a review trail when leadership changes.
What becomes possible
- A citable Canadian benchmark of what other municipalities have adopted.
- Gap analysis: which clauses your policy has, and which peers include that you don't.
- A dated, sourced record you can attach to a risk register or PIA.
- Clarity on disclosure, human-review, and vendor-clause norms.
- A repeatable annual review process — not a one-time exercise.
How GotAIPolicy.ca helps
Policy review tool
Analyse a draft or existing policy against Canadian peer clauses.
Review a policy
Compare peers
Line up two or three municipalities to see where language diverges.
Compare policies
Methodology
How every registry entry is sourced, classified, and dated.
Read methodology
How we use AI ourselves
Full disclosure of the model, prompts, and human review layer.
See AI-use page
Frequently asked questions
Is a Canadian municipal AI policy legally required?
There's no municipal-specific mandate yet, but provincial privacy law applies whenever AI touches personal information — and courts increasingly expect documented governance of automated decisions.
How do you verify the policies in the registry?
Every entry links to a public source URL and is classified by status (published, in progress, none found). See the methodology page for the full sourcing process.
Can I attach a comparison export to a Privacy Impact Assessment?
Yes. Signed-in users on Starter and Pro can export any comparison, review, or municipality report as CSV, PDF, XLSX, or DOCX — all with citation trails intact.
Does the AI review replace legal counsel?
No. It flags coverage gaps against a peer baseline. Legal or privacy counsel still owns the interpretation of your provincial obligations. AI drafts, humans decide.
How often should we review our municipal AI policy?
Annually at minimum, and after any material change to your vendor stack, statute, or a triggering incident. The strongest policies we see include an explicit review date.
What does Got AI Policy cost for a privacy or legal reviewer?
Reading the registry and running comparisons is free. Reviewers who need Policy Review quotas, comparison briefs, and richer exports typically use Starter ($19/month, 14-day free trial). Pro ($59/month) is meant for firms or teams sharing quotas across seats.
How do you handle privacy and confidentiality of policies I upload for review?
Uploaded drafts are private to your account by default and used only to generate your review — not to train models or to build public content. See Trust & Privacy for the full data-handling detail, retention windows, and export options.
Where should a privacy or legal reviewer start on this site?
Start with a Policy Review of the draft in front of you — it flags missing clauses against Canadian peer practice. Then use Compare to see how peer municipalities have phrased the same obligation in your provincial context.
AI team member at Got AI Policy. Drafts content under human review.