diff --git a/roles/home-gui/files/chromium-policy/.gitignore b/roles/home-gui/files/chromium-policy/.gitignore
new file mode 100644
index 0000000..06fdec1
--- /dev/null
+++ b/roles/home-gui/files/chromium-policy/.gitignore
@@ -0,0 +1,2 @@
+.flatpak-builder/
+build-dir/
diff --git a/roles/home-gui/files/chromium-policy/ant-policy.json b/roles/home-gui/files/chromium-policy/ant-policy.json
new file mode 100644
index 0000000..9be43c3
--- /dev/null
+++ b/roles/home-gui/files/chromium-policy/ant-policy.json
@@ -0,0 +1,44 @@
+{
+    "AutofillAddressEnabled": false,
+    "AutofillCreditCardEnabled": false,
+    "BrowserSignin": 0,
+    "CreateThemesSettings": 2,
+    "DefaultSearchProviderEnabled": true,
+    "DefaultSearchProviderImageURL": "https://kagi.com/asset/v2/favicon-32x32.png",
+    "DefaultSearchProviderKeyword": "kagi",
+    "DefaultSearchProviderName": "Kagi",
+    "DefaultSearchProviderSearchURL": "https://kagi.com/search?q={searchTerms}",
+    "DevToolsGenAiSettings": 2,
+    "ExtensionInstallForcelist": [
+        "ddkjiahejlhfcafbddmgiahcphecmpfh"
+    ],
+    "ForcedLanguages": [
+        "en-GB",
+        "en-US",
+        "en"
+    ],
+    "GenAiDefaultSettings": 2,
+    "GenAILocalFoundationalModelSettings": 1,
+    "GenAIVcBackgroundSettings": 2,
+    "GenAIWallpaperSettings": 2,
+    "HelpMeReadSettings": 2,
+    "HelpMeWriteSettings": 2,
+    "HistorySearchSettings": 2,
+    "HttpsOnlyMode": "force_enabled",
+    "LiveTranslateEnabled": false,
+    "NetworkPredictionOptions": 2,
+    "NewTabPageLocation": "about:blank",
+    "PasswordLeakDetectionEnabled": false,
+    "PasswordManagerEnabled": false,
+    "PaymentMethodQueryEnabled": false,
+    "PromptForDownloadLocation": true,
+    "RestoreOnStartup": 1,
+    "SearchSuggestEnabled": false,
+    "SpellcheckLanguage": [
+        "en-GB"
+    ],
+    "SpellCheckServiceEnabled": false,
+    "TabCompareSettings": 2,
+    "TabOrganizerSettings": 2,
+    "TranslateEnabled": false
+}
diff --git a/roles/home-gui/files/chromium-policy/build b/roles/home-gui/files/chromium-policy/build
new file mode 100755
index 0000000..d1d70da
--- /dev/null
+++ b/roles/home-gui/files/chromium-policy/build
@@ -0,0 +1,5 @@
+#!/bin/sh
+# https://chromeenterprise.google/policies/
+rm -fr build-dir/
+flatpak run org.flatpak.Builder --user --install --force-clean build-dir/ org.chromium.Chromium.Extension.ant-policy.yaml
+rm -fr build-dir/
diff --git a/roles/home-gui/files/chromium-policy/org.chromium.Chromium.Extension.ant-policy.yaml b/roles/home-gui/files/chromium-policy/org.chromium.Chromium.Extension.ant-policy.yaml
new file mode 100644
index 0000000..7e106fe
--- /dev/null
+++ b/roles/home-gui/files/chromium-policy/org.chromium.Chromium.Extension.ant-policy.yaml
@@ -0,0 +1,20 @@
+# Base the branch and sdk versions on the Chromium yaml:
+#   https://github.com/flathub/org.chromium.Chromium/blob/master/org.chromium.Chromium.yaml
+
+app-id: org.chromium.Chromium.Extension.ant-policy
+branch: '1'
+runtime: org.chromium.Chromium
+runtime-version: stable
+sdk: org.freedesktop.Sdk//24.08
+build-extension: true
+appstream-compose: false
+
+modules:
+  - name: policy
+    buildsystem: simple
+    build-commands:
+      - mkdir -p ${FLATPAK_DEST}/policies/managed
+      - install -Dm 644 ant-policy.json ${FLATPAK_DEST}/policies/managed
+    sources:
+      - type: file
+        path: ant-policy.json