Distribute policies to ten or a thousand recipients, collect verifiable acknowledgements, and keep records ready for audits and reviews.
A structured approach to policy awareness, ownership, and evidence.
Replace scattered files, email threads, and shared drives with a single place for policies and versions. Every distribution is tied to a specific document version, a defined set of recipients, and a point in time. There is no ambiguity about what was sent, to whom, or when.
Recipients confirm through a verified, individual action. Each confirmation is tied to a specific person, a specific policy version, and a specific point in time. Group-based targeting ensures the right people are included automatically, without manual follow-up.
Every confirmation is timestamped and tied to a specific policy version. This creates retrievable documentation that stands on its own during audits, reviews, and compliance assessments, without requiring manual reconstruction.
Replace scattered files, email threads, and shared drives with a single place for policies and versions. Every distribution is tied to a specific document version, a defined set of recipients, and a point in time. There is no ambiguity about what was sent, to whom, or when.
Recipients confirm through a verified, individual action. Each confirmation is tied to a specific person, a specific policy version, and a specific point in time. Group-based targeting ensures the right people are included automatically, without manual follow-up.
Every confirmation is timestamped and tied to a specific policy version. This creates retrievable documentation that stands on its own during audits, reviews, and compliance assessments, without requiring manual reconstruction.
Upload your policy document as a PDF and define the recipient list. Group recipients by department, location, or role to ensure the correct version reaches the right individuals. Each upload creates a version-linked record that ties all subsequent confirmations to that specific document.
Each recipient receives a secure, single-use link via email. They access the assigned policy directly, read the document, and submit their confirmation. No accounts, no passwords, and no software installation required, ensuring high completion rates across technical and non-technical recipients.
Monitor confirmation progress in real time with a clear overview of completed, pending, and outstanding acknowledgements. When evidence is needed, generate a formal PDF certificate or export granular CSV logs containing exact timestamps, version identifiers, and individual recipient actions.
Turn passive distribution into verified acknowledgement. Advanced control for administrators, seamless access for employees and receivers.
Acknowledgement coverage stays complete without anyone chasing it. New recipients are picked up automatically, and policies return for confirmation on the schedule you set, so nothing lapses quietly between audits.
Import recipients in bulk via CSV, Excel, or Microsoft Entra ID integration. Assign them to groups for role, department, or location-based policy targeting. When new employees join a group, they inherit all active policies automatically — no manual admin work.
Every policy is versioned explicitly. When a document changes, you decide whether to start a new confirmation round or update the file for recordkeeping only. Each version is locked at dispatch and fully traceable.
Group policies into a single, controlled confirmation cycle across teams and departments. Confirmations stay synchronized, deadlines aligned, and proofs unified at any scale.
Handle exceptions without stalling progress. Decide whether to extend deadlines or finalize cycles as-is, while keeping confirmations consistent and cycles under control.
Recipients confirm policies via a secure, personal link. No accounts or passwords are required, while every confirmation remains uniquely identified and timestamped.
Add your own logo, message, and color to everything recipients see, from the first request to the moment they confirm.
Sign in using an existing Microsoft work account. No separate credentials required for administrators or recipients.
Assign supervisors to recipient groups and let them follow up with their own teams. Outstanding confirmations are handled close to the people who owe them, not by one central admin.
Add questions to any policy and every recipient must answer them all before they can confirm they have read and acknowledged it. Configure once, enforced for everyone.
If preferred, require recipients to draw their signature before confirming policies. An optional add-on for use cases where a more formal acknowledgement is needed.
Generate audit-ready proofs instantly. Get formal PDF certificates and detailed CSV logs with timestamped records for every single recipient.
All events, including uploads, version changes, dispatches, confirmations, and closures, are logged. Nothing is implicit. Nothing is lost.
Set how long confirmation records are kept for inactive recipients. Records are automatically deleted when the retention period expires, supporting GDPR and industry compliance requirements.
Recipients receive a secure, single-use email link with direct access to their assigned policies. The process requires no account creation, no password management, and no software installation. This accessibility-first approach ensures high completion rates across all recipients, including non-technical staff and external contractors.
Audit-ready documentation must be retrievable, version-linked, and independently verifiable. Policy Confirm provides two complementary formats: formal certificates for rapid proof of compliance, and granular data logs for detailed inspection during audits or internal reviews. Both are generated instantly and require no manual assembly.
Click to switch format
From evaluation to organization-wide rollout.
Designed for organizations operating under formal compliance requirements.
Test and evaluate the system
Everything you need to run policy confirmations at scale
For organizations that require delegated governance, multiple entities, or tailored compliance workflows.
Clear answers about acknowledgements, confirmations, and audit-ready documentation.
Guides, templates, and best practices for policy management and compliance.
Second July release: Your message, your logo, your colors
Recipient emails and confirmation pages can now carry your message, logo, and brand color, while the acknowledgement record and audit trail stay unchanged.
Read more: Second July release: Your message, your logo, your colorsJuly 2026 release: Recurring cycles, supervisors, and full coverage
A detailed look at what shipped in Policy Confirm during July 2026: recurring cycles, automatic catch-up cycles, live group membership during cycles, coverage warnings, supervisors, a notification center, policies without files, and clearer owner and administrator roles.
Read more: July 2026 release: Recurring cycles, supervisors, and full coverageThe UK Cyber Security and Resilience Bill: what organizations must be able to document
The UK Cyber Security and Resilience Bill expands regulatory scope and enforcement powers. Here is what in-scope organizations, and their suppliers, need to be able to document about security governance and policy awareness.
Read more: The UK Cyber Security and Resilience Bill: what organizations must be able to documentJune 2026 release: Microsoft sign-in, cycle insights, and bulk editing
A detailed look at what shipped in Policy Confirm during June 2026: Microsoft sign-in for administrators, a per-policy breakdown at cycle creation, typed eSign signatures, bulk editing for recipients and groups, Excel export for cycles, a recipient details view, and a new support page.
Read more: June 2026 release: Microsoft sign-in, cycle insights, and bulk editingAcknowledgement vs comprehension: when to add a quiz to a policy
An acknowledgement proves someone confirmed they read a policy. It does not prove they understood it. Quiz questions close that gap, but only some policies need them.
Read more: Acknowledgement vs comprehension: when to add a quiz to a policyFor a demo or specific questions about your compliance requirements, get in touch at: