AI policy for external consultants