Guided preview, four core drafts, then review
Complete onboarding, generate four core policy drafts from your organisation, and review them against ISO 27001, SOC 2, and UK GDPR. Publishing and PDFs unlock after you choose a plan.
Standards assurance
What first-run includes
Capture your organisation profile, generate four core drafts, and review them. Extra modules stay in the product for later — they are not sold as live today.
Guided preview and onboarding
No card required. Core onboarding captures sector, size, and jurisdiction so the first drafts are grounded in your organisation, not a generic template pack.
Outcome: A verified organisation profile that unlocks generation of the four core policy drafts.
Four core policy drafts
AI drafts the first four policies from that profile. Other policy families can be generated later; first-run is not a 15-template library.
Outcome: Review-ready drafts you can edit before anything is published.
ISO 27001, SOC 2, and UK GDPR review
Score the drafts against the frameworks you selected. A PASS scorecard on ISO 27001 and SOC 2 is the first-run review, not a finished audit programme.
Outcome: See gaps in plain English, then choose a plan before publishing or exporting PDFs.
Coming later
These modules exist in the codebase and will appear for organisation admins as they land. They are hidden from first-run, not deleted.
Staff training modules
Audit rooms and evidence packs
EU AI Act and full GRC
First-run path from profile to review
Complete onboarding, generate four core drafts, and review them. Publishing and PDFs unlock after you choose a plan.
Capture Core Profile
Admins complete adaptive onboarding to establish operating model, risk posture, and compliance objectives.
Determine Applicable Standards
Standards applicability ranks obligations by industry, geography, services, and data profile.
Generate and Harmonise Policy
Three-pass generation drafts, repairs contradictions, and validates coverage before reviewer handoff.
Review, Approve, and Sign Off
Approvers validate policy language, mappings, and obligations, then publish through a sign-off chain that tracks every person against every policy on one exportable compliance matrix.
Need the adjacent buying context?
Use pricing, trust, and support pages for commercial details, diligence review, and rollout questions.
Platform FAQs
How does the three-pass generation process improve policy quality?
Pass 1 drafts the policy, pass 2 checks and repairs consistency against existing obligations, and pass 3 validates compliance coverage and operational practicality.
Can teams start generating policies before every onboarding field is complete?
Yes. Policy generation unlocks once the core onboarding profile is complete, while deep profile details continue to improve precision.
What happens when a generated draft fails quality gates?
The draft is quarantined with remediation guidance and review actions so teams can fix issues without losing generation history.