Policy Generator (Beta)

Framework-mapped policies without caps

Select frameworks, scope your environment, and generate policy drafts with per-policy control tables. Exports are informational drafts—review with your security lead, auditor, and counsel.

Compliance/ISMS packages or Business/Enterprise tiers required for full export/API access.

1) Select frameworks

2) Scope your environment

3) Choose policies

Recommended set based on selected frameworks:

4) Generate (preview)

This calls the backend stub to create a draft run. You’ll see placeholders until full generation is enabled.

Requires Compliance/ISMS package or Business/Enterprise tier. You’ll review drafts before exporting.

Control table preview

Each policy includes a control mapping for the frameworks you selected.

Policy Framework Control Ref
Access Control ISO 27001:2022 A.5.15, A.5.16
Access Control SOC 2 CC6.1, CC6.3
Incident Response ISO 27001:2022 A.5.24, A.5.29

Export options

  • PDF and JSON exports (Business+)
  • Unbranded/white label on Enterprise
  • API access for automation (Business+)

Disclaimer

Policies are AI-assisted drafts. They are informational only and do not constitute legal, tax, or compliance advice. Review with your security team, auditor, and counsel.