AuditsCompliance-in-a-Box: The Startup Guide to Audit-Ready DocsSVSid Varma · 12 min readWrite each policy or bring the one you have, route it for approval, send it to the people it covers, and keep it current on a review schedule. The record builds itself as you go.
30-day trialUnlimited free viewersNo credit card required
One job, start to finish. Each step links to the part of the product that does it.
Draft privately until it is ready, or upload the PDF you already have. On a yearly plan, we move your documents in for you.
Versions and ReviewsRoute it through up to four steps, with anyone in the company as an approver. It is locked while in review, and reminders keep it moving.
Approval WorkflowsTags decide who receives it. Choose notify or acknowledge when you send it, and new hires get theirs on day one.
Policy Distribution and AccessReview dates remind each policy’s editor. If nothing changed, the date moves; if it changed, the new version goes through approval and out again.
Versions and ReviewsFilter the record and export a PDF or CSV. Publish chosen policies on your site, from the same approved version.
Audit Trail and ExportEvery change becomes a new version. Compare any two and see what changed, word by word.
Review dates remind the editor. If nothing changed, the date moves and nobody is asked again.
Inside the company and outside it, people ask the same question: is the policy approved, current and known to the people it covers.
ISO 9001, clause 7.5
Documents approved before use, changes controlled, and the current version available where it is used, with obsolete versions kept out of circulation.
ISO/IEC 27001, clause 5.2, control A.5.1
Policies approved by management, communicated, acknowledged by the people they cover and reviewed at planned intervals.
SOC 2, Trust Services Criteria CC5.3
Control activities are put in place through policies that say what is expected and procedures that put them into action.
Wherever you operate
Each country and state adds its own written policies, from harassment and leave to safety and privacy. Each gets its place beside the rest.
Your region’s laws, the standards your customers ask for, and your own house rules. Write each one as a policy, approve it, and send it to the people it covers.
Whichever department writes it, every policy follows the same cycle.
Need help writing the policies? Find a consultant for your standard.
Yes. Upload a policy as a PDF and send it for acknowledgment, or draft it in AllyMatter. On a yearly plan, we move your documents in for you.
Anyone in the workspace who can see it, including viewers. Up to four steps, with up to six people in each.
It becomes a new version and goes through approval. Everyone keeps seeing the current version until the new one is approved, then everyone it covers is asked again.
The editor moves the review date. There is no new approval and nobody is asked again.
Yes. Publish an approved policy as a public page, on your own domain on the Scale plan.
Yes. You can see at a glance who has acknowledged and who has not, and reminders go out until they do.
free for 30 days