Policy Confirm

Frequently looked up

Q1Who is this for?

Organizations that need a proper system for policy acknowledgement and want it to fit how they already work. The owner sits in compliance, HR, legal, security, operations or governance, often alongside other work. Most are there because a customer, an auditor, head office or a certification asks for proof; the rest want to know that everyone has read the policies that apply to them.

Q2Does it adapt to how our organization works, or do we adapt to it?

It adapts. Different groups, sites or roles can run on different policies and different cycles. A cycle can be scheduled, recurring, or sent by hand, and can pick up new joiners on its own with their own deadline. Confirmation can be a click, a quiz, or a signature, per policy.

Q3Do recipients need an account or login?

No. Recipients open a personal link from the email, or sign in to the policy portal with a one-time code sent to their email. No account and no password.

Q4Does this work for ISO 27001, SOC 2, NIS2 and similar frameworks?

Yes. These frameworks ask you to show that the people covered by a policy were made aware of it, and auditors test that by sampling. Every confirmation is locked to a specific document version with a timestamp, and the record can be exported per person or per cycle for an audit.

Q5Can this be used for more than policies?

Yes. Use it for any document people need to read and confirm: guidelines, procedures, HR notices, onboarding material, updated terms or important internal announcements.