Your policies,your process.

Send once a year, or when a policy changes. Target by department, location, role or any group you define. Send to new hires automatically, or manage it manually. However you work, shape the process around your organization.

Start free
Try with up to 10 recipientsNo credit card
Get started in secondsMagic link access
Choose between EU or US hosting
Policy Confirm dashboard showing compliance cycles with status, policies, and progress tracking
Flexibility

Works for every organization

In some organizations one person handles policies alongside four other jobs. In others, a compliance team answers for every site and every framework. Whatever your size, it adapts to how you work.

Start simple, grow into it

Upload a policy, pick who gets it and send. Add groups, recurring cycles and supervisors when you need them, not before.

Your structure, your rhythm

Target by department, location, role or any group you define. Send once a year, with every change, or let it run on autopilot.

Expand with your own tools

Connect Microsoft sign-in, Entra ID sync, SharePoint links, and Teams and Slack when you need them.

How it works

From upload to confirmed in three steps

01

Upload & target

Upload the policy, or link to it, and pick who gets it: by department, location, role or any group you define.

The policy page in Policy Confirm: status, validity, category, groups and recipients, every version of the document as a PDF, a link or stored elsewhere, and comments from administrators
02

Distribute

Everyone gets a personal link by email. They open the policy, read it and confirm. No account, no password, nothing to install.

Policy Confirm recipient confirmation page: the policies to read and confirm, under the organization's own category headings, each with a checkbox and a View button
03

Track & follow up

See who has confirmed and who has not, as it happens. Reminders go out on their own, so you are not chasing anyone by hand.

A running cycle in Policy Confirm with a deadline per recipient: 50 of 55 confirmed, 2 overdue, and each pending recipient's own deadline in the table

See it in action: the whole flow, in two minutes

Try a look:
Always there

A policy portal for every employee

Give everyone one page where they find every policy that applies to them. What is waiting for them and by when, what they have already confirmed, and which policies have a new version.

How the portal works

  • One link to share

    Link it from the intranet, the onboarding checklist or a Teams tab. Change it later and the old link sends people on.

  • Your logo and color

    The portal, the sign-in page and the confirmation page carry your logo and accent color, so it looks like part of your own tools.

  • Sign in with a one-time code

    A code sent to their email. No account, no password, and only Active recipients in your organization get in.

  • Let people ask the policiesPaid add-on

    With Policy Intelligence, each person can ask a question in the portal and get the answer from your own policies, with the source.

    About Policy Intelligence
Features

Fits the way
you work

A small team or a group with many sites, once a year or with every change, by hand or on autopilot. Set it up the way that suits your organization.

Standard features

In every plan. See pricing

Upload policy, link it, or say where it is

Upload a PDF, link to SharePoint or the intranet, or say where the policy is kept. Every change becomes a new, tracked version.

Coverage on autopilot

New joiners are added to running cycles automatically, everyone gets their own deadline counted from the day they were added, and reminders and overdue follow-up go out on their own.

Per-person and company-wide confirmation history

Open any person and see every policy they have confirmed, with version and date, or the status across the whole organization. Export it as a PDF certificate or a CSV/Excel file whenever someone asks.

Bulk import & group targeting

Import recipients from CSV, Excel or Microsoft Entra ID, group them by role, department or location, and send each policy to the groups it applies to.

Magic link access

Recipients confirm through a secure personal link. No accounts, no passwords.

Microsoft single sign-on

Sign in with an existing Microsoft work account. No extra passwords.

Flexible cycles

Send several policies in one round, leave out people or groups, or skip those who already confirmed.

Drafts and scheduled send

Save a cycle as a draft, or schedule it to go out on a date and time you pick.

Policy categories

Sort a long list into categories you name.

Policy expiry tracking

Give each policy a validity period and see when it is due for review.

Comments for collaboration

Work on policy renewals together, with comments on the policy itself.

Delegated follow-up

Let supervisors follow up with their own teams.

Full audit log

Every upload, version change, dispatch and confirmation is logged.

Electronic signatures (eSign)

Require a signature when a more formal acknowledgement is needed.

Quiz questions

Add questions recipients must answer before they can confirm.

Your branding

Your logo, message and color on everything recipients see.

Microsoft Teams and Slack

When a cycle goes out, a message with the deadline and a link to the portal can land in the channels you choose.

EU or US data region

Choose whether your data lives in the EU or the US.

Paid add-ons

Added to a Standard plan when you need them. See pricing

Smooth experience

No login needed for recipients

A secure personal link takes each recipient straight to the policies assigned to them. Nothing to sign up for, nothing to remember, nothing to install. That is why the people who are hardest to chase still confirm.

  • No account
  • No password
  • No install
The same email and confirmation page with a customer's own logo, message and purple accent color
Drag to compare the default look with your own branding

Customize it with your own logo, message and color. Drag the handle to compare.

Proofs

Ready when someone asks

A customer, a partner, head office or an auditor: whoever asks, the record is there the moment you need it. A certificate for one person or the whole organization, or a CSV/Excel log with every recipient, version and timestamp.

Click to switch format

PDF confirmation history for one recipient, with policy versions, cycles and timestamps
Organization certificate of compliance showing acknowledgements across all policies
CSV confirmation records example with timestamps and recipient details

Plans & pricing

From evaluation to organization-wide rollout.

Unlimited policies, cycles and administrators on every plan. You only pay for how many people you send to.

Free

No time limit
No credit card

For small organizations, and for larger ones that want to test and evaluate the system first.

Up to 10 recipients
$0 / month
All standard features
Start free

Standard

Everything you need to run policy confirmations and follow up automatically.

Up to 75 recipients
$49 / month
Up to 250 recipients
$79 / month
Up to 1000 recipients
$139 / month
All standard features
Start free

Enterprise

For organizations that require delegated governance, multiple entities, or tailored compliance workflows.

Add-ons

Added to a Standard plan when you need them, priced by its size and billed with it.

Learning

Short interactive courses on security, privacy, AI and conduct, confirmed with the policies. Four today, more coming.

  • Up to 75 recipients$29 / month
  • Up to 250 recipients$59 / month
  • Up to 1000 recipients$99 / month

All courses included, the ones still to come too.

About Learning

Policy Intelligence

Ask your policies a question and get the answer with the policy and page it came from. Try it free with 20 questions.

  • Up to 75 recipients150 questions a month$99 / month
  • Up to 250 recipients500 questions a month$149 / month
  • Up to 1000 recipients2,000 questions a month$199 / month

150 pages of policy text on every tier. More pages or questions can be added.

About Policy Intelligence

Frequently asked questions

Clear answers about acknowledgements, confirmations, and the records they leave behind.

Usage & scope

Organizations that need a proper system for policy acknowledgement and want it to fit how they already work. The owner sits in compliance, HR, legal, security, operations or governance, often alongside other work. Most are there because a customer, an auditor, head office or a certification asks for proof; the rest want to know that everyone has read the policies that apply to them. It works for a single team as well as a group with several companies.

It adapts. Different groups, sites or roles can run on different policies and different cycles. A cycle can be scheduled, recurring, or sent by hand, and can pick up new joiners on its own with their own deadline. Policies can be uploaded, linked to SharePoint or the intranet, or noted as stored elsewhere, and sorted into categories you name, which recipients can see too. Confirmation can be a click, a quiz, or a signature, per policy. What stays the same is the record: who confirmed which version, when.

Yes. Use it for any document people need to read and confirm: guidelines, procedures, HR notices, onboarding material, updated terms or important internal announcements.

Email and shared folders show that something was sent or made available. They do not tell you who has read it, who has not, or which version they saw. Here each person confirms the version they received, reminders go out on their own, and you can see at a glance who is still missing.

No. Recipients open a personal link from the email, or sign in to the policy portal with a one-time code sent to their email. No account and no password.

Two, both added to a Standard plan and priced by its size. Learning: short interactive courses on security, privacy, AI and conduct that people take alongside their policies, from $29 a month. Policy Intelligence: an assistant that answers questions from your own policy documents and cites the policy and page, from $99 a month, with a free trial of 20 questions. Everything else is a standard feature in every plan.

No. Upload a policy, import recipients from CSV or Excel, and send. Microsoft sign-in and Entra ID sync are there when you want them, but you do not need them to get started.

Yes. A single site, department or subsidiary can run its own policies, cycles and records without involving group IT. If the group later wants shared policies and reporting across companies, that is available on Enterprise.

Yes. These frameworks ask you to show that the people covered by a policy were made aware of it, and auditors test that by sampling: pick a few names and ask for their record. Every confirmation is locked to a specific document version with a timestamp, and the record can be exported per person or per cycle for an audit.

Sending & follow-up

Yes. Send a cycle right away, schedule it for a date and time, or let new joiners receive the policies that apply to them automatically. Nothing goes out unless you set it up.

No. Each cycle sends one request per person. Reminders only go to those who have not confirmed yet.

They stay pending, and reminders go out on the schedule you set. Once their deadline passes they show as overdue, and you can follow up yourself or let their supervisor do it. If someone never confirms or leaves, an administrator can close the cycle and note the exception.

Proof & compliance

Yes. Every acknowledgement is locked to a specific document version. Updates never overwrite historical confirmations.

Yes. Every confirmation is logged with a timestamp and the version that was confirmed. Export it as a PDF certificate or a CSV/Excel log when a customer, partner, head office or auditor asks.

Defensible evidence typically includes version-specific confirmations tied to identifiable individuals, timestamps, visibility into outstanding acknowledgements, and a retrievable log that can be exported without manual reconciliation. The goal is not just to show that a policy was sent, but to demonstrate traceable acknowledgement of the exact version in force.

ISO 27001 does not mandate specific software or acknowledgement mechanisms. However, it requires organizations to demonstrate awareness and control of documented information. In practice, structured acknowledgement is often the most defensible way to evidence awareness because it links individuals to a defined policy version and produces retrievable documentation during audit review.

SOC 2 does not prescribe a specific tool. Auditors testing the control environment normally ask for evidence that personnel were made aware of, and agreed to, the policies in force during the audit period. Version-specific acknowledgements with timestamps and an exportable log are one way to satisfy that request during SOC 2 evidence collection.

Email confirmation can be acceptable in small, tightly controlled environments. The risk is reconstruction: email threads rarely provide consistent version linkage, reminder history, and exportable evidence. If an auditor asks who acknowledged a specific policy version on a specific date, manual processes can become fragile and time-consuming to validate.

You can keep the policies in SharePoint. A policy in Policy Confirm can link to the SharePoint page or file, and Policy Confirm adds who has to confirm it, the deadlines and reminders, and the record of who confirmed which version. SharePoint on its own shows that a file was opened, not that a named person confirmed a specific version.

It is built for policies, not contracts. For most policies a confirmation is enough, and when you need something more formal you can require an electronic signature (eSign) on that policy.

Latest from Policy Confirm

Guides, templates, and best practices for policy management and compliance.

Get your policies read and confirmed

Want a demo, or wondering how it would fit the way you work? Get in touch at:

Start free
Try with up to 10 recipientsNo credit card
Get started in secondsMagic link access
Choose between EU or US hosting