Online security policy acceptance

Publish your security policy and record who read and accepted it, with name, date, UTC time and IP in an immutable log.

Book a demo

How it works

How the flow runs and what is recorded

The admin publishes the PDF

The current policy enters as a document. New version, new acceptance. History is not rewritten.

The employee reads and accepts in the portal

From their portal, not from an email thread. They read. They accept. The gesture is tied to that version.

Name, date, UTC time and IP

The record is immutable. There is no “soft delete” toggle of the acceptance. If the auditor asks for the trail, it is there.

It is not the admin audit log

The log of who changed a course or a permission lives in compliance and security. This is the roster accepting a PDF.

The policy is accepted and a record remains — not a PDF on a drive

Security-policy acceptance, here, is the flow in which the admin

It is not an email with “reply OK”. It is not a spreadsheet. It is the evidence the auditor asks for when they ask who read the current policy and when.

Training talks about courses and adoption

This is not a course. It is an acceptance act with a trail. Mixing it with the ISO quiz is the error: the quiz proves training happened; this record proves the published document was accepted.

The strong link is compliance

This is policy acceptance. Compliance is program evidence.

What it is for

What it is for when the auditor asks for the trail

It is for ISO, for internal policies, for onboarding that cannot be “we

It is for when legal asks who accepted the March version, not the 2021 one. It is for a distributed roster with no paper signature.

It is not training

Publishing the policy does not replace the standard’s course. It is not a DPA. Account data processing lives in legal and the Trust Center.

In the cycle

How it connects to training and compliance

Adaptive security awareness training can coexist: the joiner takes the course and accepts the policy. Two gestures. The employee portal is the place; portal detail is a pillar anchor, not a new URL. Compliance exports program evidence. Here is the acceptance act. The course PDF certificate does not replace this record, or the other way around.

Back to adaptive security awareness training Compliance and evidence

Capabilities

How this module is used

Cybersecurity courses for companies, ready to assign

Courses in Spanish, Portuguese and English, segmented by profile: everyone, technical, executives, operations and compliance. Reviewed at least once a year.

Compliance courses: ISO 27001, PCI DSS and more

Training by standard, with versions for everyone, executives and implementers. ISO 27001, PCI DSS, OWASP, LGPD and TISAX.

Anti-money laundering (AML/CFT) courses

AML/CFT training adapted to each country in the region, ready to assign and audit.

Privacy and personal-data protection courses

Personal-data protection training adapted to each country’s law in the region.

Gamification in cybersecurity: trivia, rankings and micro-content

Trivia with ranking, scores and competition between areas. Plus micro-content answered in under a minute, without entering the platform.

Cybersecurity awareness material

Ready-to-send pieces on phishing, ransomware, deepfake and passwords, as video, PDF and image. In Spanish and Portuguese.

Questions

Questions about policy acceptance

What is recorded?

Name, date, UTC time and IP, immutably, tied to the published version.

Can an acceptance be deleted?

The record is presented as immutable. “How to delete” is documentation and is not sold here as a marketing feature.

Does it replace the standard’s course?

No. Accepting a PDF does not prove training. Training does not prove the current policy was accepted.

Where does the auditor see it?

In the exportable record of the act. The wider frame is on compliance.

Is there a product screenshot?

No. Book a demo to see the console.

Already a customer? See how it is configured

Publish the policy and leave the trail the auditor asks for

In the demo we look at the PDF, the portal and the record with UTC time and IP. No paper signature from the branch.

Book a demo