Startup Playbook: success through failure

AI Usage Policy for Small Business: What the Big Walk AI Row Teaches, a One-Page Template and the EU AI Literacy Rule

TL;DR: do small businesses need an AI usage policy?

Yes, and the Big Walk AI row of 9 and 10 November 2026 shows why. A celebrated indie studio used chatbots on well under 0.1% of its game's code, had no written AI policy, and ended up explaining itself in public after 19 award jurors said they won't vote for games that use generative AI in any capacity. In the EU, a policy also helps with the law: Article 4 of the AI Act has required businesses that use AI to support their staff's AI literacy since 2 February 2025, and enforcement started on 2 August 2026. One page is enough: the tools you allow, what AI never touches, who decides, what you log and what you tell clients.

An AI usage policy for a small business sounds like paperwork for companies with a legal team, until a client, a platform or a jury asks how your work was made. That is what happened to House House, the studio behind Untitled Goose Game, this week; Blended BORIS has the full story of the Big Walk AI disclosure. Here we take the part that matters for every founder and freelancer who sells creative or knowledge work: the studio's own admission that it had no AI policy, and that it calls that missing policy "a failure".

What can a small business learn from the Big Walk AI row?

The numbers in House House's statement are tiny. LLM chatbots helped the team with hard bugs in the final stretch, some snippets were rewritten into game code, and the studio puts the share at well under 0.1% of the code. Nothing else in the game came from generative AI. The trouble came from timing and paperwork. The disclosure existed only in the studio's award entry, Steam never asked, and when the jury debate went public the studio had to write its explanation under pressure.

Three lessons carry over to any business that uses AI:

Different gatekeepers draw different lines. Steam ignores coding assistants; the 19 jurors count code as AI use too. Your clients will each have their own line, and you won't know it until they ask.
A specific answer protects you. House House could say "well under 0.1%" and give a 10-line example. A business without records can only say "we used some AI", which invites the worst reading.
The policy has to exist before the question. Writing it after a complaint looks like damage control, even when your use was small and honest.

Do EU small businesses have to train staff on AI?

Yes. The European Commission's AI literacy Q&A says Article 4 of the AI Act has applied since 2 February 2025, and the supervision and enforcement rules apply from 2 August 2026. The Digital Omnibus, in force since mid-July 2026, softened the wording: there is no longer a required "sufficient" level of AI literacy, but providers and deployers of AI systems must still take measures to support it for their staff and for others who use AI on their behalf.

Question	Answer from the Commission's Q&A
Does a company whose staff use ChatGPT for ad copy or translations fall under Article 4?	Yes. Staff should be told about the specific risks, such as hallucinations.
Do we need a certificate?	No. An internal record of trainings and other guidance is enough.
Do we need an AI officer or a governance board?	No specific structure is required.
Do contractors count?	People working for you as a service provider or contractor need the right AI skills for their task, the same as employees.

For a small business, an AI usage policy plus a short record of who learned what is the simplest way to show you took those measures. It also answers the client and platform questions in the same document.

What goes into a one-page AI usage policy?

Purpose. One sentence on why you use AI: drafting, research, admin, code. It keeps everything else in proportion.
Approved tools. Name each tool and plan. Business plans and personal free accounts treat your data differently, so write down which one staff may use.
Never-AI zones. The work you sell as handmade, final creative files, legal advice to clients, anything a contract forbids.
Data rules. No client secrets, passwords or personal data in prompts unless the tool's terms and your contract allow it.
Who decides. One named person approves new tools and exceptions, in writing.
The log. Where uses get recorded and how long you keep them.
Disclosure. The sentence you give clients, platforms and award forms, kept honest and current.
Training. Who learned what and when, for your Article 4 record.
Review date. Tools change monthly. Put the next review in the calendar.

How do you write it in one afternoon?

Start with the inventory, because it always surprises people. Ask everyone, freelancers included, to list every AI feature they touched last month: chatbots, meeting note-takers, AI in the design tool, translation, the email assistant. Then draw the red lines with your contracts open, since many client agreements already say something about confidential data or original work. Our guide to the AI tools in a founder's stack helps you decide which tools earn a place on the approved list.

Keep the log light or nobody will fill it in. A shared sheet with five columns (date, person, tool, task, what changed) takes ten seconds per entry. If you let AI agents act for you, set approval rules first; we covered that in GPT-6.1 Terra for small business and in who pays when an AI agent moves money from your account.

What should you tell clients about your AI use?

Tell them before they ask, in one plain paragraph in your proposal or terms: which tools you use, for what, what you never use AI for, and that a person checks every deliverable. If a client forbids AI, put that in the contract and in your log for the project. House House's statement shows the other side of disclosure too: the studio worried that voluntary disclosures make AI look normal. You can respect a client who feels the same by offering an AI-free option and pricing it honestly.

Turn your skills into your first startup

The Fe/male Switch startup game takes you from idea to first paying customers in weekly quests, with an AI co-founder and a community of founders.

👉 Start the game

FAQ: AI usage policy for small business

Does a one-person business need an AI usage policy?

If you sell creative or knowledge work, yes. A one-page policy lets you answer a client, a platform or an award form in minutes, with specifics. In the EU, if you have staff or contractors who use AI for you, it also supports your AI literacy duty under Article 4 of the AI Act.

Is an AI policy required by law in the EU?

The AI Act doesn't require a document called a policy. Article 4 requires providers and deployers of AI systems to take measures to support AI literacy, and the Commission says an internal record of trainings is enough to show it.

When did the EU AI literacy rule start?

Article 4 has applied since 2 February 2025. The supervision and enforcement rules apply from 2 August 2026.

What happened with Big Walk and AI?

House House said LLM chatbots helped with bugs on well under 0.1% of the game's code and that it had no internal AI policy, which it called a failure. 19 IGF jurors had said they won't vote for games that use generative AI in any capacity.

Should I tell clients I use AI?

Yes, in one plain paragraph in your proposal or terms, before they ask. Say which tools you use, for what, and what you never use AI for.

How often should a small business update its AI policy?

Every three to six months, and whenever you add a tool, take on a client with AI rules or a platform changes its disclosure form.

About the Author

Violetta Bonenkamp, also known as MeanCEO, is an experienced startup founder with an impressive educational background including an MBA and four other higher education degrees. She has over 20 years of work experience across multiple countries, including 5 years as a solopreneur and serial entrepreneur. Throughout her startup experience she has applied for multiple startup grants at the EU level, in the Netherlands and Malta, and her startups received quite a few of those. She’s been living, studying and working in many countries around the globe and her extensive multicultural experience has influenced her immensely.

Violetta Bonenkamp

2026-11-13 10:32 AI tools