Start from your risk assessments, not a blank prompt. Give the AI your real hazards, people and arrangements, and ask for a three-part policy: a signed statement of intent, who is responsible for what, and how each risk is managed. Then walk the premises with the draft and correct every name, procedure and emergency detail before anyone signs it.
A generic AI policy lists hazards you do not have and misses the ones you do, and the missing ones are the ones that hurt people. Many places also require a written policy once you employ a set number of people, sometimes with required content, so check the rule where you operate. For higher-risk work, have a competent adviser review the draft.
What the AI needs from you before it writes a word
A health and safety policy is a description of how your business actually manages risk. The AI can structure and word that description, but only you know the facts. For the illustrative example used throughout, a charity shop with two paid staff and 14 volunteers, the inputs were gathered in about an hour:
| Input | What the charity shop had |
|---|---|
| Premises | Shop floor, back sorting room, small stock room upstairs, kitchenette, one fire exit to a rear yard |
| People | Shop manager, assistant manager, 14 volunteers aged 16 to 81, a van driver from the charity's head office twice a week |
| Activities | Receiving and sorting donated bags, steaming clothes, pricing, till work, banking cash, moving stock upstairs |
| Risk assessments | Three existing ones: manual handling, sorting donations, lone working, last updated two years ago |
| Emergency arrangements | Two fire extinguishers, alarm serviced annually, first-aid kit in the kitchenette, one trained first aider |
| Incidents | Accident book: a needle-stick scare, two minor steamer burns, a volunteer who fell on the stairs carrying a box of books |
| Contractors | Electrician for testing donated electricals, alarm service company |
If your risk assessments are missing or stale, do those first; the policy's third section is built from them. The approach in drafting risk assessments with AI produces exactly the hazard-by-hazard material this policy needs.
A prompt that stops the policy going generic
The single most useful instruction is to forbid hazards that are not in your inputs. Without it, you will get forklift trucks and confined spaces in a charity shop.
Write a health and safety policy for the charity shop described below.
Structure it in three parts:
Part 1 Statement of intent (half a page, signed by the most senior person responsible)
Part 2 Responsibilities (a table of roles that exist in this business, with duties)
Part 3 Arrangements (one section per hazard or activity listed below)
Rules:
- Use only the hazards, roles and arrangements given. Do not add hazards I haven't listed;
instead, add a short list at the end: "Hazards you may want to consider".
- Do not quote laws, regulation names or section numbers.
- Where a legal requirement might apply (first-aid provision, fire equipment,
electrical testing), write [CHECK: local requirement] rather than a figure.
- Plain English a 16-year-old volunteer can follow. Short sentences.
- Do not promise anything not listed in "current arrangements".
Business details:
[paste the input table and the three risk assessments]Run it on a paid plan or with the model-training setting switched off. There is nothing personal in these inputs if you describe people by role, which you should.
A statement of intent the manager can actually sign
The first draft of Part 1 usually needs the most editing, because models default to corporate language. An illustrative before and after from the charity shop:
BEFORE (AI first draft)
"We are committed to achieving zero accidents and fostering a world-class safety culture.
We will ensure that all employees receive comprehensive annual refresher training and that
all risks are eliminated so far as possible."
AFTER (edited)
"We want everyone who works, volunteers or shops here to go home unhurt. We will find out
what could cause harm in this shop, take sensible steps to prevent it, and tell every staff
member and volunteer how to work safely before their first shift. We will review this
policy every year, and sooner if something goes wrong."The "before" version made two promises the shop could not keep: annual refresher training for everyone, and eliminating all risks. A signed policy that promises what you do not do is worse than no promise, because it shows you knew the standard and did not meet it. Read every "will" in the draft and delete any you cannot back with a real arrangement.
Responsibilities that name real roles
Part 2 is where AI invents an organisation chart. The first draft here included a "Health and Safety Committee" and a "Site Safety Officer". Neither exists in a two-staff shop. The corrected table used the roles the shop really has:
| Role | Responsible for |
|---|---|
| Charity's operations lead (head office) | Signing the policy, funding equipment and testing, reviewing accidents across all shops |
| Shop manager | Day-to-day safety, volunteer inductions, keeping risk assessments current, reporting accidents to head office within 24 hours |
| Assistant manager | Covering the manager's duties when absent, weekly first-aid kit and fire exit check |
| Trained first aider | First aid on their shifts; restocking the kit |
| All staff and volunteers | Following the arrangements, reporting hazards and near misses, not handling donated sharps |
| Head office van driver | Safe loading at the rear door; following the shop's rules while on site |
One test catches most problems: for every duty in the table, can you name the person doing it this month? If the only first aider works Tuesdays and Thursdays, the policy needs to say what happens on the other days.
Arrangements for the hazards this shop actually has
Part 3 is the working heart of the policy. Each section should say what the risk is, what the rule is and who checks it. The AI's draft for the charity shop was a good starting structure; these are the edited sections, with the real details added.
Sorting donated bags
Donations can contain needles, broken glass and soiled items. Volunteers wear the gloves kept by the sorting table, tip bags out onto the table rather than reaching in, and never press a bag down to make room. A sharps container sits on the sorting room shelf; only the manager or assistant manager uses it. This rule came straight from the accident book, where a volunteer had reached into a bag and felt a needle cap.
Lifting and carrying
Boxes of books go upstairs half-full, two people carry anything awkward, and nothing is carried up the stairs while someone is coming down. The box-of-books fall made this section specific; the AI's generic "use correct lifting technique" would not have prevented it.
The clothes steamer
Only volunteers shown how to use it, water refilled only when unplugged and cool, and the cable routed along the wall rather than across the walkway. Two minor burns in a year earned this its own section.
Donated electrical items
Nothing electrical goes on sale until the contracted electrician has tested it. Untested items go on the marked quarantine shelf. [CHECK: local requirement] stays here until the manager has confirmed what testing applies to second-hand electricals where the shop trades.
Opening, closing and banking
Two people open and close where rotas allow; the lone-working arrangement covers the rest, with a text to the manager on arrival and departure. Cash goes to the bank at varied times, never in a charity-branded bag. The routine sits in the shop's opening and closing checklists, and the policy simply refers to them.
Fire, first aid and accidents
Fire exit and route to it kept clear at all times, including on busy donation days; extinguisher locations; assembly point; first-aid kit location; who records accidents and where. Each detail is a fact to verify on the walk-round, which is the next step.
Walk the shop with the draft in your hand
Print Part 3 and walk the premises, ideally with a volunteer who knows the shop well. Tick each arrangement against what you see. The charity shop's walk-round took 40 minutes and found four problems the draft had described as fine:
| Draft says | What the walk-round found | Fix |
|---|---|---|
| Fire exit kept clear at all times | Saturday donations stacked against the rear door | Marked floor area for bags, away from the door; checked at noon on Saturdays |
| Assembly point: the rear car park | The car park was sold last year and is now fenced off | New assembly point: outside the café opposite, agreed with its owner |
| First-aid kit fully stocked | Two dressings past their use-by date, no eye wash | Monthly check added to the assistant manager's list |
| Steamer cable along the wall | Extension lead across the doorway to reach the only socket | Steamer moved beside the socket; lead removed |
None of these could have been caught at a desk. That is the whole point of the walk-round: AI can write a policy that is internally consistent, but only a person standing in the room can tell whether it is true.
What AI gets wrong in safety documents
Across drafts like this one, the same failures turn up. Check for each of them before sign-off:
- Invented legal references. Regulation names and section numbers, sometimes from another country's law, sometimes not real at all. The prompt forbids them; delete any that slip through.
- Numbers stated as law. "One first aider per 50 employees" or a set weight limit for lifting, presented as a legal requirement. These vary and some are guidance rather than law. Replace with your own arrangement or a check marker.
- Hazards from other workplaces. Machinery guarding, confined spaces and vehicle movements appear in retail drafts if you do not forbid them.
- Vague controls. "Appropriate PPE will be provided" tells a volunteer nothing. Name the gloves and where they are kept.
- Promises nobody keeps. Annual training, monthly inspections, quarterly meetings. Keep only the ones someone is already doing or will start this month.
Cross-check the policy against your risk assessments
The policy and the risk assessments should tell the same story. After editing, paste both into a fresh chat and ask: "List every control measure in the risk assessments that the policy does not mention, and every arrangement in the policy that no risk assessment supports." Illustrative output for the charity shop:
In the risk assessments but missing from the policy:
- Manual handling RA: "trolley used for moving bag cages from the rear door" - the
policy's lifting section doesn't mention the trolley.
- Lone working RA: "panic alarm button under the till" - not in the policy.
In the policy but not supported by any risk assessment:
- "Cash banked at varied times, never in a branded bag" - no RA covers banking.
- Steamer section - no RA covers the steamer.Both lists are useful. The first shows the policy forgot controls the shop already uses, which is an easy edit. The second shows two activities that were never assessed at all; the steamer had caused two burns and had no risk assessment. The manager wrote both assessments that week, and the policy then pointed to them. Run this check again at every annual review, because the two documents drift apart as soon as one is updated without the other.
When a competent adviser should review the draft
A small shop with ordinary retail hazards can usually write and check its own policy this way. Get a qualified health and safety adviser, or your insurer's risk team if they offer one, to review it when any of these apply:
- You prepare or serve food, or run a café alongside the shop.
- Work at height goes beyond a two-step ladder, such as high racking or loft storage.
- The building is old enough that asbestos is possible and you plan any alterations.
- You use machinery, hazardous chemicals or vehicles as part of the work.
- Staff or volunteers include under-18s or people who need extra support, and you have not assessed that before.
- There has been a serious injury, or an insurer, landlord or funder has asked for evidence of competent advice.
Some legal frameworks require employers to appoint a competent person to help them meet their duties. If yours does, the AI draft is useful preparation for that person, not a substitute for them.
A one-page version volunteers will read
A six-page policy is for the file; volunteers need the rules on one side of paper. Ask the AI: "From the signed policy below, write a one-page summary for a new volunteer: the 8 rules that matter most on a normal shift, in plain English, with where to find the first-aid kit, the fire exit and the assembly point." Illustrative output:
Staying safe in the shop
1. Never reach into a donation bag. Tip it onto the sorting table, wearing gloves.
2. Found a needle or broken glass? Stop, leave it, tell the manager.
3. Carry book boxes half-full. Two people for anything awkward.
4. Only use the steamer if you've been shown how. Unplug it before refilling.
5. Electrical donations go on the quarantine shelf, never on the shop floor.
6. Keep the rear fire exit clear. Donations go in the marked area.
7. First-aid kit: kitchenette, top shelf. Assembly point: outside the café opposite.
8. Hurt, or nearly hurt? Tell the manager the same day so it goes in the accident book.Use it in induction and get each volunteer to sign that they have read it. If you track who has been through which induction, add the policy summary to your staff training matrix so re-reads after each annual review are not forgotten.
Toy shop stock rooms and community gardens
The inputs change with the business, and so do the sections that matter most. Two short illustrations:
- A toy shop. The stock room has high shelving and a delivery day when cages of boxes arrive at once. Its arrangements centre on step ladders (inspected, never standing on the top tread), keeping aisles clear on delivery days, and handling returned toys with button batteries, which are kept in a closed box away from the shop floor because small children are in the shop every day.
- A community interest company running a community garden. Volunteers work outdoors with hand tools, sometimes alone on weekday mornings, far from the building with the first-aid kit. Its policy needs a check-in rule for lone volunteers, a tool store and sharpening routine, sun and heat arrangements, and a rule for litter picking where needles may be found. An AI prompted with shop-style inputs would miss almost all of these, which is why the input table comes first.
Review dates, triggers and version history
Put three things on the last page: the date signed, the next review date, and a short change log. Review at least annually and whenever the premises, activities or manager change, or after an accident or near miss. The change log can be one line per review: "v1.2, March: new assembly point; steamer moved; first-aid kit check made monthly." Add the review to your compliance calendar so it does not depend on anyone remembering.
At each review, give the AI the current policy, the accident book entries since the last review and any changes, and ask: "Which sections of this policy no longer match these facts?" It is a quick way to find the paragraphs that have gone stale, though the walk-round still has the final word. If the review changes how a task is done, update the matching procedure too; writing SOPs with AI covers turning those rules into step-by-step instructions.
Time and cost for a small premises
For the charity shop, the whole job took about four hours: an hour gathering inputs, 20 minutes drafting, an hour editing the three parts, 40 minutes on the walk-round, and an hour fixing what it found and writing the volunteer summary. The AI cost was a chat plan at about $20 a month. The fixes themselves cost very little: a floor marking, two first-aid refills and a moved steamer. New volunteers now go through the one-page summary as part of the first-week induction plan, and the manager has a document that describes the shop she actually runs.
Health and safety policy questions from small employers
Do volunteers count when deciding whether I need a written policy?
It depends on the law where you operate. Thresholds for a written policy are often based on employees, but duties of care towards volunteers, visitors and customers usually apply regardless of the headcount. A charity shop run mostly by volunteers should write the policy anyway; it is how volunteers learn the rules, and insurers and funders often ask to see it.
Can two premises share one policy?
The statement of intent and the responsibilities section can be shared. The arrangements usually cannot, because each site has its own exits, assembly point, first-aid kit location and layout. Keep one policy with a short site-specific section for each premises, and walk each site separately with the draft before signing.
How often should the policy be reviewed?
Review it at least once a year and whenever something changes: new premises, a new activity such as a cafe or deliveries, a change of manager, or an accident or near miss. Put the review date in the document itself and in your compliance calendar, and record what changed at each review so you can show it was genuinely updated.
Further reads
- Business Continuity Planning With AI: A Template for Small Firms — Plan for the incidents your safety policy can't prevent.
- How to Write an Employee Handbook With AI and What to Check — Where your safety rules sit alongside other staff policies.
- Does Your Business Insurance Cover AI Mistakes? — What insurers ask about when AI-written documents go wrong.
- How to Set Up Human Review for AI Work Without Slowing Down — A review routine for any AI document you sign.
- How to Turn Handwritten Forms Into Spreadsheet Data With AI — Get paper accident and check forms into one spreadsheet.
- Writing Pharmacy SOPs With AI: A Step-by-Step Workflow — Record how a task is really done, feed AI your regulator's wording, then gap-check, bench-test and sign off. A pharmacy SOP in about two hours.
- AI Tools and AI Development: The Complete 2026 Guide — the AI hub, including every tutorial in the AI-for-business series.
Sources: general health and safety management practice for small premises. No legal thresholds or regulation names are given because they differ by jurisdiction.