Platform · Policy
Policy governance beyond the PDF
A policy nobody read is not governance. Compli-Once tracks versions, review cadences and per-person acknowledgement, so the lagging policy stands out immediately.
Versioned with enforced reviews
Effective dates and review cadences are enforced, not aspirational. Overdue reviews surface on the dashboard.
Per-person acknowledgement
Acknowledgement rates per policy, per team, per person. Governance you can see, not assume.
Framework-tagged
Each policy knows which frameworks it serves and appears as evidence where it applies. One document, every obligation it satisfies.
Evidence vault, validity tracked, not discovered
| Access review Q2 | Valid |
| VAPT report 2026 | Valid |
| ISMS attestation | Expires in 12 days |
| DR drill report | Expired |
Renewal task raised on the DR drill report, before it lapsed into a finding.
Illustrative, computed live per tenant in the platform.
Connected to
Frequently asked questions
How is acknowledgement tracked?
Each policy version goes to the people it applies to, and acknowledgement is recorded per person. Rates are visible per policy, and the lagging policy or team stands out on the dashboard.
Do policies count as evidence automatically?
Yes. Policies are framework-tagged and linked to the controls they support, so the current approved version serves as evidence wherever the control applies.