Internal Rules & Policies
We draft, revise, and review internal rules and policies—from work rules and information security policies to AI usage guidelines. We prioritize practical documents that employees can actually follow, not just legally compliant forms. Our work ranges from building a systematic rulebook for organizational growth or IPO preparation to adding the policies that new ways of working require.
Coverage Areas (Examples)
We cover a wide variety of policy types, from the company's foundational rules through to policies for specific domains.
Governance
We build the governance rulebook — board regulations, whistleblowing systems — systematically, often in preparation for IPO or organizational growth.
Examples： Board and Committee Rules / Related-Party Transaction Policy / Internal Whistleblowing Policy / Document Retention Policy
Compliance
We develop compliance rules — codes of conduct, anti-bribery, anti-social-forces — designed to function together with training and operations rather than sit on a shelf.
Examples： Compliance Policy and Code of Conduct / Anti-Organized Crime Policy / Anti-Bribery and Corruption Policy / Export Control Policy
Risk Management
We prepare risk-management frameworks — BCP, cybersecurity response — starting from an inventory of your actual risks and ending with plans that can be executed.
Examples： Risk Management Policy and Framework / Business Continuity Plan (BCP) support / Supply Chain Risk Management Policy / Cybersecurity Response Policy
Information Security
We develop the core rules for information management — security policies, personal data handling — at a standard that satisfies certifications and client audits while remaining workable on the ground.
Examples： Information Security Policy / Personal Data Handling Rules / Incident Response Policy / Cloud / SaaS Usage Policy
AI & Digital
We create the newer rules the digital era demands — generative-AI guidelines, social media policies — focusing on concrete guidance employees can actually follow, not just lists of prohibitions.
Examples： AI Usage Guidelines (Generative AI / LLM) / AI Governance Policy / Social Media Policy / Data Utilization Policy
HR & Labor
We prepare and update HR rules — work rules, side-job policies, harassment prevention — ensuring they reflect both legal changes and how your organization actually works.
Examples： Work Rules (new / revision) / Side-Job Policy / Anti-Harassment Policy / Remote Work Policy
Our Strengths
Expertise in AI & Digital Policy Design
With the rapid spread of generative AI, demand for AI usage guidelines and governance policies has surged. We design AI policies grounded in technical reality—understanding how LLMs work, hallucination risks, and training data issues—so that the rules are practical and actionable, not just lists of prohibitions.
Policies Built to Be Used, Not Just to Comply
A policy that sits in a drawer is worthless. We apply structured document design techniques from our consulting background to create policies where anyone can immediately understand what to do and what not to do. Practical enforceability is the most critical factor in reducing compliance risk.
Continuous Response to Legal Changes
Laws affecting corporate policies—privacy, parental leave, freelancer protection, whistleblowing, and more—change every year. We can propose revisions in response to regulatory changes even after initial drafting, keeping your policies from becoming outdated.
FAQ
Q. Can you draft work rules from scratch?
Yes — we handle drafting from scratch. Workplaces with ten or more employees are legally required to create work rules and file them with the labor standards office. Even for workplaces under ten employees, having rules in place significantly reduces risk in the event of disputes.
Q. What should an AI usage guideline cover?
Items commonly included are: (1) permitted AI tools, (2) prohibited uses (e.g., inputting confidential or personal data), (3) copyright and usage conditions for AI-generated content, (4) hallucination mitigation (output verification obligations), and (5) consequences of violations. Optimal content varies by industry and internal AI usage, so we design guidelines based on a prior interview.
Q. Can I engage you to review existing policies only, without full redrafting?
Yes — we accept requests limited to identifying issues in current policies and proposing improvements. This includes checking for areas not yet updated to reflect legislative changes, such as the Childcare and Nursing Care Leave Act, the Personal Information Protection Act, and the Freelance Protection Act.
Q. Can you provide ongoing support for policy updates when the law changes?
Yes — we provide spot revision support, and you are welcome to contact us whenever a legislative change requires a policy update. If you prefer ongoing involvement, a retainer arrangement is also available.
Q. What are the approximate costs and timelines?
These depend on the type and complexity of the policy and whether we are drafting from scratch or revising. Revising a single standalone policy typically takes one to two weeks, while comprehensive engagements such as a full work rules package or group-wide policy development take several weeks. We review the scope and provide a fee quote before engagement.
Q. Can you help standardize policies across an entire group of companies?
Yes — we support consistency reviews between parent and subsidiary policies and assist in developing group-wide common policies. We design realistic, practical solutions that account for each entity's specific circumstances, including industry, size, and location.
Get in Touch
We will listen to your concerns and propose the most suitable service. Initial contact creates no contractual obligation.
Contact Us