Current version
A single approved version that stays valid while you prepare the next one, with history and comparison between versions.
Policy library
Create and export security policies in minutes, not weeks.
Start from 67 templates in five languages, write them on the page with your document's design and manage their full lifecycle: review, approval, signature, versions, team reading and export to Word. Every approved policy can serve as evidence in your audits.
- 67 templates in 5 languages
- Internal or link-based signing
- Export to Word
67 policy and procedure templates
5 languages: Spanish, English, French, Italian and German
50 custom variables, on top of the 8 predefined ones
12 custom design styles you can save with your branding
Why it matters
Auditors don't just ask for policies: they ask whether they're approved, current and communicated.
ISO 27001, NIS2, ENS, GDPR and DORA require documented policies. Writing them is rarely the problem: the hard part is keeping them up to date, knowing which version is current and proving who approved it and when.
Approval and signature
Who reviewed, who approved and who signed, with the date and a fingerprint of the exact version.
Periodic review
A next-review date and an owner, so no policy goes out of date unnoticed.
How Audexa helps
From template to signed policy, in a single workflow.
Drafting, governance and evidence in one place, connected to the frameworks you audit.
Create
Start from a solid foundation.
67 templates
Security, privacy, operations, compliance and HR, linked to each framework.
On-page editor
You write with your document's design in view, with a section outline and a panel with Details, Compliance, History and Signatures. Drafts save themselves.
Live variables
Organization, owner, version or next review update themselves in drafts and are fixed on approval. In older policies, “Link data” turns hand-typed text into variables.
Aude inside the text
Select a paragraph and Aude suggests improving it, making it clearer, adapting it to one of the policy's frameworks or translating it. The document only changes if you click Replace.
Branded design
Fonts, headers, colors, logo, classification levels and section numbering.
Govern
Control of the full lifecycle.
Versions and review
Editing an active policy creates the draft of the next version. You send it for review with the reason for the change, the reviewer approves or requests changes, and you can compare two versions.
Comments in the text
Comment on a paragraph and reply to or resolve the conversation next to the document. The outline marks sections with open comments.
Internal or external signing
Drawn signature or an email request with a single-use link valid for 14 days.
Coverage by framework
Which common policies each standard covers, which you have and which are missing, by priority and status.
Prove
Policies as proof of compliance.
Policy as evidence
Save an immutable copy of the active version in the evidence vault; when a new version is approved, the copy is updated.
Team reading
Ask the team to read and accept the policy: each person confirms the version they have read, and the Word file and the evidence include it.
Export
Download in Word or PDF with your organization's design.
Traceability
SHA-256 fingerprint of the signed version: if the policy changes, a new signature is required.
Some features depend on your plan and active modules.
Templates
The policies standards require, already drafted.
The templates cover the areas that come up most often in audits and are linked to the frameworks you manage: 43 to ISO 27001, 39 to ENS, 35 to NIS2, 20 to GDPR and 4 specific to DORA.
- Security: access, passwords, encryption, networks, secure development, EDR…
- Privacy: GDPR, retention, data subject rights, DPIA and breaches
- Operations: backups, continuity, change management and assets
- Compliance: risk management, third parties, AI, DORA and incident reporting
Compliance by control
Which controls each section of your policy covers.
In the Compliance panel, Aude reads the policy and tells you which controls from its frameworks each section covers, which it covers partly and which are missing. For what is missing, it suggests clauses you can insert if you want: the decision is always yours.
- Section-by-section reading against the policy's frameworks
- Suggested clauses that are only inserted if you choose them
- Reading the same text again uses no AI requests
- With a focus active, the guidance talks about common policies, never mandatory ones
Compliance by controlSuggested by Aude
- 2. ScopeCovers the control
- 4. Access controlPartly covers it
- Periodic access reviewMissing · suggested clause
- 6. Policy reviewCovers the control
Team reading
Prove that your team knows the current policy.
Ask the whole team to read and accept an active policy. Each person confirms the version they have read, anyone who still has it pending gets a reminder in the bell on Mondays and, when a new version is approved, the same people are asked again.
- The policy list shows how many people have read it
- Confirmation tied to the exact version
- The policy's Word file and evidence include the acknowledgement
- Weekly reminder in the bell for anyone who hasn't read it
Policy acknowledgementCurrent version
- Security leadRead and accepted
- Systems teamRead and accepted
- Customer servicePending · reminder on Monday
Signing
Request signatures by email, including from people outside your organization.
Send a signature request to a team member or any email address. The link is single-use, expires in 14 days and is tied to the exact version of the document.
- One signer per request
- Fingerprint of the signed version
- Record of who signed and when
- AI policy signatures count toward AI literacy
Signature requestsIn progress
- Executive managementSigned
- Security leadSigned
- External IT providerPending · 9 days
How it works
Your policy library in three steps.
Choose a template
Filter by framework and priority and start with the policies you're missing.
Tailor and approve
Write on the page with live variables and help from Aude, gather comments and send it for review with the reason for the change.
Sign and export
Collect signatures and team readings, export to Word and save it as evidence for the control.
Before and after
Policies in Word vs. policies in Audexa.
AreaScattered documentsAudexa
Starting point
A blank page or generic templates
67 templates linked to each standard
Current version
“policy_final_v3_FINAL.docx”
One approved version, with a draft of the next one and comparison
Communication
An email with the PDF attached
Acknowledgement confirmed per person and version
Signatures
Emails and scanned PDFs
Link-based signing with a version fingerprint
Review
Forgotten until the audit
Review date and owner
Evidence
Attaching the Word file by hand
Immutable copy in the evidence vault
Frequently asked questions
What people usually ask us about Policy builder.
What happens to the current policy while I edit the new version?
It stays valid. Editing an active policy creates the draft of the next version; the current one is only replaced when the reviewer approves the new one. If the reviewer requests changes, the draft comes back to you with their comments.
Does Aude change my policies?
Not on its own. Aude suggests wording, clauses or translations, and the document only changes if you click Replace or insert the clause. Approval always comes from a person.
Can the templates be used as is?
They're a solid starting point, but every policy must be adapted to your organization's reality. Variables and the editor make that quick, and the review workflow ensures someone validates the policy before it's approved.
Which formats can I export to?
Word (.docx) and PDF, with your organization's design and branding.
Is the signature legally binding?
It's an internal approval signature with traceability (who, when and which version), designed to demonstrate policy governance to auditors. It does not replace a qualified electronic signature.
Which languages are the templates available in?
All 67 templates are available in Spanish, English, French, Italian and German.
Which plan do I need?
The policy library is included in the Premium and Diamond plans and can also be purchased as a separate module.
Does it work for a group with several sites?
Yes, with Sites and group, which Audexa activates on request on Premium (3 sites) and Diamond (5), extendable. The main site publishes group policies that are mandatory or adaptable: each site adopts or adapts them and signs its own, and when a new version comes out, the adapted copies are flagged for review.
Request a demo
See your policy library in a demo.
In 30 minutes we create a policy from a template, take it through review and signature and turn it into evidence.
- We review which policies your standards require.
- We show you templates, variables, design and signing.
- We explain which plan or module fits you.