CompassDocsPolicy management from draft to signed-off
Own the full policy lifecycle in one place: draft a policy, route it for approval, publish a versioned page, request acknowledgements, and prove — with an audit log and completion tracking — who agreed to what and when.
Request acknowledgement on a policy and track org-wide completion; every change is audited.
A defensible policy process, without extra tools
- Draft → review → approve workflow so policies are vetted before they go live
- Acknowledgements: request sign-off and track completion across the org
- Assign critical policies as training decks with a confirmation gate — waivable for staff who trained elsewhere (Enterprise)
- Immutable version history — show exactly what a policy said on any date
- Audit log of edits, approvals, and acknowledgements for compliance evidence
- Content review reminders so policies are re-checked on schedule, not forgotten
Acknowledge & prove
Request acknowledgement on any policy and see who has (and hasn't) signed off — the evidence auditors ask for.
Approved, not ad-hoc
An approval workflow means the published policy is the one leadership signed off, with a record of who approved it.
Audit-ready history
Version history plus an audit log show what changed, who changed it, and when — across the whole policy set.
Frequently asked
Can employees acknowledge that they've read a policy?
Yes. Policy acknowledgements (Enterprise) let you request sign-off on specific documents and track org-wide completion, with a compliance portal showing progress.
Is there an audit trail?
Yes. An audit log records edits, approvals, and acknowledgements, and every document keeps full version history — so you can demonstrate what a policy said and who agreed to it on any date.
Does it help with SOC 2 or ISO evidence?
It provides the documentation backbone: versioned policies, approvals, acknowledgement tracking, and an audit log. Many teams use it to keep policy evidence current between audits. (CompassDocs is a documentation tool, not a certification.)
Can we self-host for data control?
Yes — run it entirely on your own infrastructure. Combined with SSO and private spaces, sensitive policies stay under your control.
Related: Employee handbook · Healthcare · Roles & approvals · Analytics & audit
Free & open source to self-host
One Docker command installs CompassDocs with unlimited users and documents. Enterprise adds SSO, Microsoft 365 sync, compliance, and training for a flat $599/year.
Get started in 2 minutes See pricing