Draft, approve, publish, and lock — without leaving the platform.
Full policy lifecycle on one data model. Effy drafts from your controls, named reviewers approve, and PolicyVersion locks the moment you publish. Your auditor sees exactly what shipped, when, and who signed off.
Policy work, end to end.
AI-assisted drafting
Effy generates first drafts from your existing controls, framework requirements, and prior policy versions. Review, edit, route — never start from a blank page.
- Draft from controls or framework requirements
- Inline citations to source artifacts
- Reviewer overrides AI suggestions, always
Approval workflow
Configurable approval chain — single approver, sequential, or parallel. Named reviewers, timestamps, and comments captured on every decision. SLA tracking for stalled approvals.
- Configurable approval chains
- Named reviewers with comment trail
- SLA alerts on stalled approvals
Immutable PolicyVersion on publish
When a policy publishes, a PolicyVersion record locks. Drafts and approved-but-unpublished content stay separate. Auditors see exactly what was published, when, and by whom.
- PolicyVersion locks at publish
- Drafts isolated from published artifacts
- AuditLog captures every change
Three steps from setup to value.
Draft
Start from a template, an existing policy, or have Effy generate one from your controls. Cite sources inline as you write.
Approve
Route through your approval chain. Reviewers comment, edit, or approve in-platform. Activity log captures every step.
Publish + lock
On publish, an immutable PolicyVersion record is created. The published artifact is permanently fixed for audit reference.
"We used to manage policies in Google Docs and pray nobody edited the wrong version. PolicyVersion locking gave us back our audit story — our examiner now has a trail they can actually defend."