The Policy Management module provides a centralized system for creating, reviewing, approving, publishing, and retiring organizational policies and procedures. Configurable approval workflows, section-based collaboration, and versioned templates ensure structured and accountable governance. Staff attestation campaigns provide measurable evidence that employees have acknowledged required policies, while exception management tracks risks, controls, and expiry. Deep links to compliance modules connect policies directly to the processes they govern, creating a unified and audit-ready governance framework.
Policy and Procedure documents share one pipeline - Draft → Review → Changes Requested → Approved → Published → Review Due → Retired — with a version label, review-cycle number, and an SLA compliance status against a governance deadline.
A management template defines reusable structure and sections, while a separate creation template defines the metadata capture form used when instantiating a new document - each document snapshots the exact template versions it was built from.
Start Revision clones the latest live/retired document on a template into a fresh draft, with optional owner/section reassignment; Redraft sends a document back to draft, with full version history and an audit trail available to Org Admin.
Org Admin configures reusable, versioned approval-chain templates per document type, with ordered steps mapped to a role or a named approver, and a mode of Any One, All Required, or Strict Sequence.
When a document enters approval, the active chain is snapshotted and per-step approvals are created - so a later edit to the chain template never retroactively changes an approval that's already in flight; every user gets a personal My Approvals inbox.
A document can be broken into section assignments, each given to a specific user/role; assignees work from My Sections/My Tasks queues while the document owner triages, accepts, rejects, reassigns, or excludes sections, and merges accepted content into the final document - owners can also propose ad-hoc extension sections beyond the original template.
Campaigns target all staff, a custom list, specific roles, or departments, with a deadline and optional recurrence; each employee gets a tracked acknowledgement record with reminder counts, escalation to manager and HR, and a downloadable PDF acknowledgement certificate.
Any user can request an exception - title, justification, risk assessment, compensating controls, scope, and an effective/expiry window; exceptions flow through review and approval, with automatic expiry or manual revocation with a reason.
Policies and procedures link directly to the compliance service they govern - ROPA, DSAR, DPIA, Vendor, Breach - with in-app deep links so other modules can send users straight to the governing document.
Every rejected document carries rejection comments and the rejecting reviewer's name, and every document tracks its SLA compliance status against a governance deadline - so a stalled review is visible long before it becomes a gap.
Talk to our team to see a live demo tailored to your requirements.
Fill in the form below and our team will get back to you shortly.