Policy Handbook – Your single source of truth for remote and hybrid work

The Revolution Is Here

Remote and hybrid work are no longer experiments born of the pandemic – they’re the standard across industries. Staff/kaimahi expect flexibility, organisations rely on digital collaboration, and AI tools are increasingly part of daily workflows.

Even if your organisation hasn’t formally adopted AI, it’s almost certain that staff are already using it informally – what’s often called shadow AI. From drafting emails with Copilot to transcribing meetings with Otter.ai, these tools are being used for work purposes whether or not policies exist. That reality carries risks, and it should be a wake‑up call for leaders to get ahead of governance.

Why Your Handbook Matters More Than Ever

Sid Sijbrandij, CEO and co‑founder of GitLab, famously called the organisational handbook the “single source of truth.” For distributed teams, it’s the bible of the organisation: mission, values, policies, processes, training, and communication tools all in one place.

Today, that handbook must go further. It needs to cover:

  • Hybrid work practices – onboarding, supervision, wellbeing, and performance in flexible settings.
  • AI governance – not just for formal adoption, but to address shadow AI use that’s already happening.
  • Cybersecurity and privacy – protecting staff and client data in digital environments.
  • Compliance and regulation – ensuring your organisation meets evolving standards across Aotearoa New Zealand and Australia.

Without this foundation, staff will lack guidance and may end up impeded rather than empowered. Organisations risk confusion, inefficiency, or even regulatory breaches.

Two Ways to Build Your Handbook

At The Policy Place, we recognise that organisations have different needs and resources. That’s why we offer two approaches:

1. Bespoke one‑off handbook

  • Tailored to your organisation’s mission, values, and compliance requirements.
  • Delivered as a complete resource you can use immediately.
  • Ideal for organisations that want a fixed, customised reference without ongoing updates.

2. Online suite of policies and guidance

  • A dynamic, accessible platform that staff can reach anytime, anywhere.
  • Includes policies, procedures, and additional tools such as checklists, forms, and templates.
  • Designed for continuous improvement, with scheduled reviews and updates when regulations or technologies change.
  • Perfect for organisations that want a living, iterative resource aligned with hybrid work and emerging AI use.

Shadow AI: The Hidden Risk

Even if your organisation hasn’t formally adopted AI, shadow AI use is already here. Staff may be using transcription tools, chatbots, or generative platforms without oversight. That creates risks around:

  • Data privacy – sensitive information being entered into external tools.
  • Accuracy and defensibility – outputs that may be flawed or non‑compliant.
  • Equity and cultural safety – tools that don’t reflect organisational values or obligations.

Your handbook should explicitly address these risks, setting boundaries and guidance so staff know what’s acceptable and what isn’t.

How The Policy Place Helps

Whether you need a bespoke one‑off handbook or a living online suite of policies and guidance, The Policy Place helps organisations in Aotearoa and Australia build compliance‑driven, AI‑ready frameworks. We ensure your handbook empowers staff, meets compliance obligations, and adapts to the realities of hybrid work and shadow AI use.

Frequently Asked Questions (FAQ)

What is shadow AI?

Shadow AI refers to staff using AI tools informally – without official approval or policies. Examples include using transcription apps, generative chatbots, or AI writing assistants to complete work tasks. While often helpful, shadow AI carries risks around privacy, compliance, and accuracy for organisations.

Why does my organisation need AI policies if we haven’t formally adopted AI?

Even if your organisation hasn’t rolled out AI tools, kaimahi/staff are likely to be already using them. Without clear policies, this use is unmanaged and potentially risky. A handbook or policy suite ensures staff know what’s acceptable, protects sensitive data, and keeps your organisation compliant.

How can a handbook help manage AI risks?

A handbook provides a single source of truth. It sets boundaries for AI use, outlines compliance requirements, and gives staff practical guidance. Whether bespoke or online, it helps organisations move from unmanaged shadow AI to responsible, defensible adoption.

Is AI business as usual in New Zealand workplaces?

Not yet. Many organisations are cautious, but AI use is increasing – both formally and informally. Shadow AI means it’s already part of daily work, even if not officially recognised. That makes proactive governance essential.

What’s the difference between a bespoke handbook and an online policy suite?

  • Bespoke handbook: A one‑off, tailored resource that reflects your organisation’s mission, values, and compliance needs.
  • Online policy suite: A dynamic, accessible platform with policies, checklists, forms, and templates. It’s updated regularly to reflect regulatory changes and evolving technologies like AI.