Answer a few questions and this humble webpage assembles a starter policy for your organization, word for word from the open-source templates that the lawyers at Falcon Rappaport & Berkman wrote and adopted for their own firm. It is free. It is public domain. It is tuned to whatever channel you dial in.
Accountants, consultants, and other professional-services firms: pick "Business" and tighten the confidentiality sections with your counsel.
Enterprise/business tiers only. The policy you'll get prohibits personal and free-tier accounts for work, that's kind of its whole thing.