GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact

Run Policy Builder

No account needed. Answer a few questions, pay securely, and receive your deliverable right away.

Kind of policy

Kind of policy

The rest of the form and the template follow this choice.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The high-level theme of the policy: it brings its professional template.

Title and sections

Title and sections

They direct the whole document. Suggestions for each kind of policy are offered; add, remove and order them as you wish.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the document, e.g. “Information Security Policy”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the document; never filled in by the AI.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    One section per line, in the document's order: drag to reorder, edit any title.

    Mandatory rules

    Mandatory rules

    Rules the policy must state, word for word or as an explicit rule.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    Press Enter to add, e.g. “MFA required”, “Quarterly access reviews”, “Log retention 12 months”.

    Targeted legal frameworks & Standards

    Targeted legal frameworks & Standards

    Selecting one adds the questions it needs.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    The laws and standards the deliverable must meet. Each one selected brings its own requirements and questions.

    Your company

    Your company

    The company named in the deliverable.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    As it should appear in the policy.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    It adapts examples and the usual obligations of the sector.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    It sets the applicable laws (e.g. data protection).

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    What the organisation already does on this theme, one per entry. The policy builds on it instead of restating it.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    Who is responsible for which area. Owners in the deliverable are taken from here; where no role covers an area, the owner is left for you to fill.

    Policy objectivesOptional: the goals the rules must serve.0 of 2 answered

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    What the policy must achieve: its rules are written to serve these goals.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    Any other goal, one per entry.

    FormatOptional: length, language and tone of the document.2 of 3 answered

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    Target length when the AI writes the document. If left empty: the usual length of this kind of document.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    Applied when the AI writes the document.

    Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

    How the policy reads: concise for managers, plain language when every employee must apply it.

    What the AI provider receives

    Your answers, to write this deliverable.

    Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

    €1.00

    What a free account adds

    Running a service never requires an account. An account adds:

    • Your company details filled in for you on every form
    • Every result saved, reusable as a source by any service
    • Results editable in the browser and in the layout editor, with their saved versions
    Create a free account