Your Team Is Already Using AI Without Policy or Training

Most of the noise about AI in education is a fight about whether it belongs in the room at all. That argument is over. Instructure's latest survey found that students and staff are already using these tools daily, without waiting for anyone's permission. The interesting finding is what is missing underneath people while they use these tools.

Here are the numbers worth pausing on. Only 31% of US schools have a written AI policy, and for the people doing the work, 45% of educators said they had no AI training at all, 38% had some, and just 8% went through anything comprehensive. So you have a majority of a workforce using a genuinely powerful technology every day, with no shared rules and no real preparation. The tool arrived. The scaffolding did not.

If you run a company rather than a school, do not file this under "education problem" and move on. The pattern is almost identical in corporate life. Your marketing team is drafting with AI. Your analysts are pasting data into chat windows. Someone in finance has automated a report. Meanwhile the AI policy is a slide in a deck marked "in progress" by a working group that meets fortnightly. When usage runs ahead of governance like that, the risk is already here. Data has already left the building. Decisions have already been shaped by outputs nobody checked.

I want to be careful here, because the reflex response to a governance gap is to reach for control. Ban the risky tools and lock it all down. That instinct comes from an older way of running organisations, one built for a world of standardisation and compliance, where the job of leadership was to stop people doing the wrong thing. It does not work with AI, because the tools are cheap and widespread, and your people have already decided they are useful. Ban them and usage just goes underground, off the corporate account, onto personal phones, where you can see none of it.

The more honest reading of the Instructure data is that policy and training are two halves of the same job, and most places have done neither. A policy without training is a document nobody reads. Training without a policy is a skill with no guardrails. What actually gives people confidence to use these tools well is knowing two things at once: what good use looks like, and where the hard lines are. That is the difference between a workforce that experiments nervously in the shadows and one that experiments openly, where you can learn from what they find.

There is a phrase I keep coming back to. Poor thinking plus powerful tools equals faster harm. AI accelerates a muddled process rather than fixing it. If your people do not understand when a tool is confidently wrong, or which data should never be pasted anywhere, more usage simply means more of that mistake, faster. The 8% figure is the one that should worry leaders most. It says the capability to use AI well is being treated as something staff will pick up on their own. Judgement does not arrive by osmosis.

So, since your people answered 'should we allow this' months ago, the practical question is narrower and more useful: given that they are already using it, what is the smallest set of clear rules and real training that would let them use it well? Write down the handful of things that could genuinely hurt you in plain language, and pair them with a short, practical session on what good looks like. You need a short set of clear rules your people can actually act on.

One thing to try this week: ask your team, with no blame attached, which AI tools they are already using and what for. The honest answer will tell you exactly how far your reality has drifted from your policy, and where to start closing the gap.

Frequently Asked Questions

How many schools actually have a written AI policy?

Only 31% of US schools have a written AI policy, according to Instructure's survey, even though students and educators are already using AI daily. The finding applies beyond education because the same gap between heavy usage and missing governance shows up in most companies, where staff adopt tools faster than leadership writes rules for them.

Should we ban AI tools until we have proper governance in place?

No, banning rarely works because usage just moves off your systems and onto personal accounts where you have no visibility. A better approach is to name the few genuine hard lines in plain language and pair them with practical training, so experimentation happens in the open where you can learn from it.

Why is a lack of AI training such a big risk?

Because AI accelerates whatever thinking it is given, so untrained staff make mistakes faster rather than fewer. Instructure found 45% of educators had no AI training and only 8% had comprehensive training, meaning most people are left to work out safe and effective use on their own. Judgement about when a tool is confidently wrong does not arrive by osmosis.

What is the difference between an AI policy and AI training?

A policy sets the rules and hard lines, while training builds the capability to use the tools well within them. You need both: a policy without training is a document nobody reads, and training without a policy is a skill with no guardrails. Together they give people the confidence to experiment openly rather than nervously in the shadows.

What is the first practical step for a leader worried about ungoverned AI use?

Ask your team, with no blame attached, which AI tools they already use and for what. That honest inventory reveals how far your day-to-day reality has drifted from your written policy and shows exactly where to start. From there, write down the handful of rules that protect against real harm and add a short session on what good use looks like.