# PolicyCo Features

> PolicyCo is a policy and procedure management platform. It covers the full policy lifecycle: AI-assisted drafting, article-level review and approval, versioned releases, distribution to staff by department and role, attestations with audit trails, evidence collection linked to procedures, framework mapping (SOC 2, HIPAA, NIST, ISO 27001, HITRUST), and a risk dashboard. SSO and SCIM are included on every plan.

Each feature below links to a markdown page with the full description, key capabilities, and documentation links. The same page is available as HTML by removing the `.md` suffix.

## Features

PolicyCo has 28 features. This is the same list as the Features menu on policyco.io, in the same order:

1. [Articles](https://policyco.io/features/articles.md): Draft, review, and approve policy content at the article level. PolicyCo turns policies into structured articles with their own draft, review, and approval workflow. Teams can collaborate on individual sections, link each article to requirements, and preserve complete version history before a policy is packaged for release. By the time a policy release candidate is assembled, the underlying content has already been reviewed and approved, making release a final formality instead of a bottleneck.
2. [Policies](https://policyco.io/features/policies.md): Version-controlled policy releases. Release policies with formal version numbers and effective dates. Articles are approved into Release Candidates, then released by Policy Managers or Board members. Automated review cycles remind you when policies are due—no more missed compliance deadlines.
3. [Procedures](https://policyco.io/features/procedures.md): Step-by-step guides owned by departments. Procedures are the "how" to your policy's "what." Each procedure belongs to a department and is approved by the Department Manager—not central policy management. Link procedures to articles to demonstrate that policies have clear implementation steps.
4. [Control Testing](https://policyco.io/features/control-testing.md): Evidence collection linked to procedures. Evidence proves you're doing what your procedures say. Create Evidence Templates linked to procedures, assign collectors, set schedules (one-off, monthly, quarterly, yearly), and track submissions. Reviewers approve or fail evidence—failures trigger Action Plans.
5. [Regulations and Requirements](https://policyco.io/features/regs-and-requirements.md): Map policies to compliance frameworks. Link your articles to external framework controls: SOC2, HIPAA, HITRUST, NIST CSF, ISO, and more. Map one control to multiple articles or multiple controls to one article. The Library includes pre-mapped controls to save setup time.
6. [Risk Management Dashboard](https://policyco.io/features/risk-management-dashboard.md): See compliance risk across your program at a glance. The Home Dashboard is your risk lens across the compliance program—not just coverage fractions, but where process breakdowns create exposure. See unlinked controls, overdue policy work, stalled procedures, late evidence, weak attestations, and open action plans. Click any card to drill down to the items that need attention.
7. [Distribution](https://policyco.io/features/procedure-distribution.md): Self-service access with intelligent search. The Viewer gives employees a clean place to find and read finalized policies and approved procedures—no editing tools, no clutter. Ask questions in plain English, like "How do I request PTO?", and get answers from your documentation. When teams need file-based sharing, policies export as PDF, Word/DOCX, or Markdown.
8. [Attestations](https://policyco.io/features/attestations.md): Digital signatures with audit trails. Capture digital signatures proving employees read and acknowledged policies. Assign by department (roster changes handled automatically), set due dates, and track completion. Automated reminders at start, 7 days, 1 day, and daily past due. Extensive reporting shows who has acknowledged which policy or procedure and who is still outstanding, so leadership, auditors, and councils get a clear answer to who has read the current version.
9. [SSO and SCIM](https://policyco.io/features/sso.md): Enterprise identity on every plan. Single Sign-On and SCIM user provisioning included on all plans—not hidden behind enterprise tiers. Connect Azure AD, Okta, JumpCloud, Google Workspace, or any SAML 2.0 provider. SCIM syncs users and departments automatically from your identity provider.
10. [Departments](https://policyco.io/features/departments.md): Organize users and control access. Departments control who owns procedures, who sees what content, and how attestations are assigned. With SCIM, departments sync from your identity provider—when someone moves teams, PolicyCo updates automatically.
11. [Action Plans](https://policyco.io/features/action-plans.md): Remediation when evidence fails. When a Reviewer fails an Evidence submission, PolicyCo triggers a Management Action Plan. Assign an author, set a deadline, document the issue, write the remediation plan, and record completion. Failures become tracked improvement opportunities.
12. [Tasks](https://policyco.io/features/tasks.md): Your personal compliance inbox. Tasks is your single list of what needs your attention: evidence coming due, drafts to submit, policies ready for review, attestations to sign. Sort and filter by type, status, or due date. System-generated based on your role—no manual task creation.
13. [Powerful Linking](https://policyco.io/features/linking.md): Connect policies to the controls and procedures that depend on them. Link Controls → Articles → Procedures → Evidence to create a complete compliance map. Show auditors exactly how requirements connect to policies, policies to implementation, and implementation to proof. Everything traceable, nothing disconnected.
14. [REST API](https://policyco.io/features/rest-api.md): Automate evidence collection. Programmatically upload evidence and manage control tests. Each user has unique API keys scoped to their permissions—an assignee's key can only upload to templates they're assigned to. Automate what you can, focus human effort on judgment calls.
15. [Policy Reviews](https://policyco.io/features/policy-reviews.md): Review cadence and reminders you control. Set a review cadence for each policy and choose how far ahead PolicyCo notifies the people responsible. Reviews appear in the Task list and show as "Review" badges in the policy grid. Never miss a compliance deadline.
16. [Agent Ready](https://policyco.io/features/chatgpt.md): Ask Claude or ChatGPT, get answers from your docs. PolicyCo is agent ready. Ask questions in plain English from Claude, ChatGPT, or the Viewer: "What is the process for requesting time off?" The AI searches your finalized policies and approved procedures and answers based on your documentation. Permissions enforced—users only get answers from documents they can access.
17. [MCP Access](https://policyco.io/features/mcp.md): One agent for authors, another for readers. PolicyCo connects agents to your policy program through the Model Context Protocol, and MCP has two sides. Producers use an agent to craft language and track overlapping concepts, with PolicyCo as its long-term memory and guardrails. Consumers get a read-only Viewer agent that helps them find answers. Every MCP interaction fully respects user roles and permissions.
18. [Slack Integration](https://policyco.io/features/slack.md): Ask policy questions without leaving Slack. Bring PolicyCo answers into Slack so teams can ask direct questions about finalized policies and approved procedures where they already work. Like MCP access, the integration gives people a conversational way to gather information without requiring access to another tool or switching context.
19. [Attachments](https://policyco.io/features/attachments.md): Link forms and documents to policies. Attach spreadsheets, forms, images, PDFs, or any file to articles and procedures. Attachments are reusable—link one form to multiple procedures. Update the file once, all links stay intact. Employees see attachments as downloadable cards in the Viewer.
20. [Security](https://policyco.io/features/security.md): Enterprise-grade protection on every plan. PolicyCo provides enterprise-grade security for organizations of all sizes. SSO included on all plans, encryption in transit and at rest, role-based access control, comprehensive audit logs, hourly backups, and configurable data residency. Security shouldn't be a premium add-on.
21. [AI Writing Assistant](https://policyco.io/features/ai-writing-assistant.md): Friendly AI help that follows your policy rules. Draft and improve policies and procedures with an AI writing assistant that works inside your rulesets. Set the standards for how your policies and procedures are written, and the assistant helps authors stay within them. Authors stay in control of every word that gets approved. Prefer to write somewhere else? Authors can even write in Claude Paper and use MCP to sync the work with PolicyCo.
22. [Co-editing and Comments](https://policyco.io/features/co-editing.md): Peer review where the writing happens. Edit policies and procedures together and leave comments for peer review right on the content. Reviewers and authors work in the same place instead of trading versions by email, so feedback stays attached to the text it is about.
23. [Release Management](https://policyco.io/features/release-management.md): A strict release process with provenance you can audit. Policies go out through a strict, repeatable release process. Every release records who approved what, so you can show exactly where a published version came from. Schedule a release for a future effective date and the new version goes live on time.
24. [Policy Import](https://policyco.io/features/policy-import.md): Bring your existing policies with you. Import the policies you already have, from any format. Start from your current library instead of retyping it, then bring those documents under version control, distribution, and attestation.
25. [Activity Logs](https://policyco.io/features/activity-logs.md): Detailed logs of user activity. PolicyCo keeps detailed logs of user activity, so you can see who did what and when. Logs back up your approval history and attestation records with a trail you can show to auditors and leadership.
26. [Document Styling](https://policyco.io/features/document-styling.md): Set the standard once and every policy follows it. Typefaces and document standards are set at the core of the platform, so every policy and procedure renders the same way. When standards change, you update them once instead of reformatting hundreds of documents by hand. The result is a library of beautifully rendered, consistent policies.
27. [Onboarding Support](https://policyco.io/features/onboarding.md): Comprehensive onboarding, included. PolicyCo pairs a reasonable price with comprehensive onboarding support. Our team helps you get your existing policies in, set up your departments and identity provider, and get your people reading and attesting.
28. [Third Parties](https://policyco.io/features/third-parties.md): One place for your vendor and contract relationships. Establish classes of third parties, such as vendors, customers, and consultants, along with the services they provide to you, including contract amounts and duration. Associate contacts with services by role and keep schedules for storing the documentation tied to each vendor. You get a central place to manage your contractual relationships alongside the policies and procedures that govern them. Third Parties is fully MCP compliant, so eligible roles can populate it from the sources you already have, including email messages, spreadsheets, and existing lists in a policy or procedure.

## Related

- [Pricing](https://policyco.io/pricing.md): Plans with unlimited users and every feature included
- [FAQ](https://policyco.io/faq.md): Common questions about PolicyCo
- [Compare](https://policyco.io/compare.md): PolicyCo against other policy management tools
- [Site index](https://policyco.io/llms.txt): Every page on policyco.io
- [Help center index](https://support.policyco.io/llms.txt): Step-by-step how-to articles for every feature, each available as markdown
- [Full site text](https://policyco.io/llms-full.txt): All product, FAQ, guide, and comparison content in one file