Compliance Templates: Explore our Policy and Procedure Gallery

A code of conduct, a data protection or privacy policy and a whistleblowing route cover the ground that auditors, customers and insurers ask about most often.

After that, write the ones that match your actual risk: acceptable use and device policies if people handle data, anti-bribery if you sell through third parties.

A policy nobody has acknowledged is difficult to rely on. What tends to matter is the evidence: who was assigned the document, when they confirmed they had read it, and which version they saw.

That is the gap Whale closes, by keeping the assignment and the acknowledgement next to the document itself.

Copy the template into Whale, work through the bracketed placeholders so it matches how your organisation actually operates, and assign it to the teams it applies to.

Set a review date at the same time, so the policy gets revisited on schedule instead of quietly going out of date.