Governance without friction

Seventeen built-in ISO 27001 aligned policy templates which can be customised with your own business details, owners, sponsors, document numbers, lifecycles, review dates, narrative, depth and maturity (Basic, Standard, or Full).

More narrative detail in our document library overview. Document Management is included with ISMS Pro—compare plans and modules when you are ready.

ISMS policy generation

Start from seventeen built-in policy templates covering common ISO 27001-style themes. Pick a maturity tier (Basic, Standard, or Full) so generated narrative depth matches how formal your organisation needs each policy to read.

  • Wizard-led generation into your document register
  • Templates include information security, access control, BC/DR, encryption, AI use, and more
  • Same document-control fields at every tier; maturity shapes body sections and wording
📄

Document register & 252 MB library

One governed register for policies, standards, and records — with enough capacity (252 MB) for thousands of typical office documents while keeping titles, status, and ownership obvious.

  • Structured records instead of ad-hoc folders
  • Storage sized for large libraries without guesswork
  • Built for ISO 27001-style evidence trails
📝

Rich text & automated versioning

Author and revise policies in a rich text editor while the platform tracks versions automatically — so “which file is official?” has one answer.

  • Replace-in-place uploads with semantic version history
  • Clear audit narrative of what changed and when
  • Less confusion than versioned filenames
⬇️

PDF & Word for offline editing

Download the official copy as PDF for distribution, or Word (.docx) when legal or operations wants to redline offline — then bring updates back through the same governed path.

  • Shareable PDF snapshots
  • Editable Word exports for offline collaboration
  • Aligned with your publish and review discipline
📅

Review calendar & publish workflow

See when policies were added, when reviews fall due, what is overdue, and what is coming up — so renewals do not rely on one person’s calendar reminders.

  • Added dates and scheduled review visibility
  • Overdue and upcoming review signals
  • Publish path aligned to accountable owners
⚙️

Types, statuses, attributes & classifications

Configure document types and lifecycle statuses, extend records with custom attributes, and apply classifications so metadata matches how your ISMS and stakeholders expect to talk about information.

  • Document types and status model you control
  • Custom attributes for search, reporting, and audit narrative
  • Classification fields aligned to sensitivity handling