Policies written for your organisation, not templates you have to rewrite

The compliance scanner analyses your policies clause-by-clause against your chosen frameworks (ISO 27001, SOC 2, GDPR, NIST, and 190+ others). It shows your coverage percentage, flags gaps at the clause level, and tells you precisely what's missing. Combined with the compliance calendar, attestation system, and exceptions management, you have full visibility into your compliance posture.

Yes — Bring Your Own Policy (BYOP). Upload your existing policies and we'll scan them against your chosen compliance frameworks to identify gaps. No starting from scratch. You'll see exactly where you're covered and what's missing, so you only create what you need.

We support 8 jurisdictions — UK, US, EU, Australia, Canada, Switzerland, Singapore, and Global — with 197 compliance frameworks including ISO 27001, SOC 2, NIST CSF, UK GDPR, HIPAA, CCPA, DORA, APRA, MAS, and many more. Pricing is available in 7 currencies (GBP, USD, EUR, AUD, CAD, CHF, SGD).

PolicySuite provides 8 dedicated roles — Organisation Owner, Organisation Admin, Compliance Manager, Finance Admin, Policy Author, Reviewer, Auditor, and Employee — each with their own dashboard, permissions, and navigation. Everyone sees what they need and nothing they don't.

Recipients receive a secure, one-click magic link via email. They can read and acknowledge policies on any device without creating an account or remembering passwords. Automated reminders escalate to managers after configurable thresholds, with daily and weekly digest batching so notifications are effective without being annoying.

Policy packs are one-time purchases that include a set of professionally written, customisable policies for specific use cases. For example, the ISO 27001 Core Set pack includes 16 policies covering the highest-impact Annex A control areas for certification.

Individual policies are one-time purchases for specific needs. Policy packs bundle related policies for a particular framework at a better price. The unlimited annual licence gives you access to all 990+ policies, lifecycle management, distribution, tracking, and everything else on the platform — renewed yearly.

Absolutely. You can buy additional individual policies or packs at any time, or move to the unlimited annual licence whenever you're ready. Your existing policies and acknowledgement data are always preserved.

Yes, we offer special pricing for registered charities and non-profit organisations. Contact our sales team to discuss your requirements and we'll work out a tailored package.

Yes. We maintain enterprise-grade security with OWASP-compliant architecture, AES-256-GCM encryption, multi-tenant data isolation, comprehensive audit logging, and secure cloud infrastructure.

We support 197 compliance frameworks across 8 jurisdictions, including ISO 27001, SOC 2, NIST CSF, UK GDPR, HIPAA, CCPA, DORA, NIS2, APRA, MAS, and many more. Our compliance scanner checks your policies clause-by-clause against any framework you choose, and you can also create custom policies.

All data is stored in secure, SOC 2 compliant data centres. We use industry-leading cloud infrastructure with automated backups, encryption at rest, and TLS 1.3 encryption in transit.

Yes. PolicySuite provides comprehensive audit reports showing policy distribution, acknowledgement status, timestamps, IP addresses, and version history—everything auditors need in one click.

PolicySuite is designed to be straightforward — most customers are fully set up within an hour with no assistance needed. If you do have a question, email support is available for all customers.

Yes. We provide guided onboarding to help you set up your organisation, import your team, and distribute your first policies. Most customers are fully operational within the first hour.

Our bespoke policies are designed to be easily customisable. For enterprise customers, we offer policy consulting services to help tailor policies to your specific industry requirements and regulatory needs.