What is this plugin?

This plugin helps your website meet privacy and AI-related regulations (such as the GDPR and emerging AI rules). It gives your visitors clear information and control over how artificial intelligence is used, and gives you the records to prove it.

Think of it like a cookie-consent tool, but focused on AI. It handles six things:

Installation & activation

1. Add the plugin Copy the aicpm folder into wp-content/plugins/, or upload the ZIP under Plugins → Add New → Upload Plugin.
2. Activate it Go to Plugins, find “AI Compliance & Privacy Manager”, and click Activate. On a multisite network you can Network Activate to enable it on every site.
3. Open the settings A new AI Compliance item appears in the sidebar. Click it, or use the Settings link on the Plugins screen.
4. Configure the basics Set your banner message, add your AI providers, and set your data-protection contact email (see the sections below).

Requirements

• WordPress 6.5 or higher
• PHP 8.1 or higher
• Works on single sites and multisite networks

The dashboard

The first screen under AI Compliance is your dashboard. It gives you an at-a-glance view of your compliance posture.

What you'll see

• Metric cards — consents granted, consents denied, registered providers, and logged AI events.
• Compliance checklist — each item shows an OK or Review badge so you know what still needs attention.
• Quick links — jump straight to Settings, Providers, or Reports.

Disclosure banner

The banner is the notice your visitors see, informing them that your site uses AI and letting them accept, reject, or fine-tune their preferences.

Setting it up

1. Go to Settings → Disclosure Open AI Compliance → Settings and select the Disclosure tab.
2. Turn the banner on Tick Enable banner.
3. Write your message Enter the text visitors will read. Keep it short and plain-language.
4. Choose the look Pick a position (bottom bar, top bar, or a corner box) and set the background, text, and accent colours with the colour pickers.
5. Set button labels Customize the Accept, Reject, and Preferences button text if you like.
6. Link a policy page (Optional) Choose a page to link from the banner's “Learn more” link — see Policy page.
7. Decide where it shows Choose which pages display the banner and whether it targets all visitors, only logged-in users, or only logged-out visitors.
8. Save Changes

What visitors experience

• The banner appears on their first visit.
• Accept allows all AI options; Reject declines them all.
• Preferences expands individual toggles so they can choose exactly what to allow.
• Once they choose, the banner stays hidden — it won't nag them on every page.

Consent & the consent log

Visitors can control four categories of AI processing. Each is opt-in by default (nothing is allowed until the visitor agrees).

Reviewing recorded consent

1. Open the Consent Log Go to AI Compliance → Consent Log.
2. Read the records Each row shows the consent type, whether it was Granted or Denied, the visitor (a logged-in username or “Guest”), the source, the policy version, and the exact time (UTC).
3. Filter Narrow the list by consent type or status.
4. Export Click Export CSV to download the records for your files or an auditor.

AI providers

Keep a register of every AI vendor your site relies on (for example OpenAI, Anthropic, or Google Gemini). This documentation is a common compliance requirement.

Adding a provider

1. Open the Providers screen Go to AI Compliance → AI Providers.
2. Fill in the form On the right, enter the provider's name. Start typing to pick from well-known vendors, or type your own.
3. Describe the processing Choose a category and record the purpose, the data processed, the retention period, and the data location.
4. Add reference links Paste the provider's privacy-policy URL and data-processing-agreement (DPA) URL if you have them.
5. Save Keep Active ticked and click Add provider.

Editing or removing

Use the Edit link on any row to update its details, or Delete to remove a provider you no longer use. Active providers are listed automatically on your public policy page.

AI training controls

Decide whether AI companies may use your website's content to train their models — and publish that decision in the formats AI crawlers understand.

Choosing your policy

1. Go to Settings → Training
2. Allow or opt out Leave Allow AI training unticked to opt out (recommended for most sites), or tick it to permit training.
3. Pick your channels Choose how the decision is published — robots meta tags, an HTTP header, robots.txt crawler blocks, and an /llms.txt file.
4. Customize llms.txt (Optional) Provide your own llms.txt text, or leave it blank to auto-generate one from your policy.
5. Save Changes

Activity log

The activity log records AI-related events on your site — API requests, token usage, and whether consent was verified — so you have an audit trail.

Turning it on

1. Go to Settings → Logging
2. Enable logging Tick Enable AI activity logging and choose whether to log requests and responses.
3. Set retention Enter how many days to keep records. Older entries are automatically deleted each day. Enter 0 to keep everything.
4. Save Changes

Viewing the log

Go to AI Compliance → Activity Log to browse events, filter by type, and Export CSV.

do_action( 'aicpm_log', 'api_request', array(
    'provider_slug' => 'openai',
    'tokens_total'  => 1200,
) );

Policy page, blocks & shortcodes

Publish a clear, public page explaining your use of AI — generated for you, or built with a block or shortcodes.

The quickest way: auto-generate a page

1. Go to Reports Open AI Compliance → Reports.
2. Create the page In the Policy page box, click Create policy page. A draft page is created containing the AI Policy block.
3. Review & publish Edit the draft to add anything specific to your organization, then publish it. You can now link it from the banner (Settings → Disclosure → Policy page).

Using the block

In the editor, add the AI Policy block (search for “AI Policy”). In the block settings on the right, choose what to display:

• AI Policy statement — a full, readable policy.
• Provider list — a table of your active AI providers.
• Consent preferences — a form where visitors can update their choices.

Using shortcodes

Prefer the Classic Editor or want to place content anywhere? Use these shortcodes:

Reports & exports

Produce compliance reports for your records, management, or an auditor.

1. Open Reports Go to AI Compliance → Reports.
2. Choose a dataset Pick Compliance summary, Consent records, or Activity log.
3. Choose a format PDF (best for the summary), CSV (for spreadsheets), or JSON (for data tools).
4. Set a date range (Optional) Limit activity and usage data to a period.
5. Download Click Download report.

Privacy & GDPR requests

The plugin integrates with WordPress's built-in privacy tools, so consent records are included when you handle data requests.

Exporting a person's data

1. Go to Tools → Export Personal Data.
2. Enter the person's email and send/confirm the request.
3. The download includes an “AI Consent Records” section with their consent history.

Erasing a person's data

1. Go to Tools → Erase Personal Data.
2. Enter the person's email and confirm.
3. Their AI consent records and activity-log entries are removed.

Settings reference

A quick map of every settings tab under AI Compliance → Settings.

FAQ & troubleshooting

The banner isn't appearing

• Check Settings → Disclosure → Enable banner is ticked.
• You may have already accepted or dismissed it — test in a new incognito window.
• Check the “Display conditions” aren't limiting it to pages you're not viewing.

“Save preferences” doesn't work / I see a console error

This usually points to a server that isn't routing “pretty” URLs. The plugin automatically works around it, but if you want the cleanest setup, enable pretty permalinks under Settings → Permalinks (choose any option other than “Plain”).

My /llms.txt page shows “Not Found”

That file needs pretty permalinks. Go to Settings → Permalinks, choose Post name, and save. Then reload your-site.com/llms.txt.

Will visitors be asked for consent repeatedly?

No. Once a visitor chooses, their decision is remembered for the number of days set on the Consent tab. They'll only be re-asked if you increase the Policy version.

Does the plugin slow down my site?

No. It loads a small stylesheet and script only where needed, and stores data in dedicated, indexed database tables.

What happens if I deactivate or delete the plugin?

Deactivating keeps all your data and settings. Deleting the plugin removes its data (tables, settings, and the manage capability) so nothing is left behind.

Glossary