Already have policies?
Keep your policies. Make them known, followed and provable.
Most companies don’t start from nothing. There’s a handbook, a set of security policies from a template or a consultant, maybe last year’s audit report. The gaps are elsewhere: nobody has really read them, the work has moved on from what they say, and the proof is scattered across inboxes and chat.
What you have, and what 93 Compliance adds
You have the documents
Upload them as they are
PDF, Word, plain text, Markdown or HTML, up to 15 MB each, or paste the text. Scanned pages and photos of printed policies are read too. Nothing has to be rewritten or reformatted first, and you can download everything as Word files whenever you like.
You don’t know where they’re thin
Find the gaps before a customer or an auditor does
Test your policies against SOC 2, HIPAA, PCI DSS, ISO 27001, GDPR or PIPEDA, against your own risks, or against the security questionnaire a customer just sent. Each requirement comes back green, yellow or red, with what covers it and what’s missing. The AI policy assistant drafts fixes as tracked changes, and nothing changes until the document’s owner accepts it.
Nobody has really read them
Make sure people know them, and keep the record
Each policy becomes a short audiobook, spoken or sung, and a set of study games, written only from your document. People listen in the 93 app or on the web. You get the record per person: how much they heard, which version they acknowledged and when, and their scores. When you upload a new version, everyone gets a summary of what changed. $10 per employee per year.
The procedures live in documents
Turn procedures into checklists that keep their evidence
A procedure becomes a checklist that starts from a button, the assistant, a schedule, or your HR system. Each step goes to a role, collects its evidence (a photo, a file, an answer, a sign-off by someone other than the person who did the work) and keeps it. Steps wait in a team’s queue, and overdue ones escalate.
The company keeps changing
Keep the documents true
The people doing the work can say “we don’t do it this way any more” at any step, with their name or without. The document’s owner decides whether to adopt the new way, push back or try it, with an AI comparison against the controls. Procedures come up for review every quarter and policies every year. When a policy changes, the procedures under it are flagged.
An audit is coming
Hand the auditor one package
Invite your auditor for the audit period, read-only, with access that ends by itself. Or download one package: every policy version in effect, training records, each procedure run with its photos and files, the risk register, vendors and systems, and a control matrix that ties each requirement to the policy and the runs that show it happened.
Start with what you have
Uploading, testing, procedures and audits are free. Training records are $10 per employee per year.
Upload your policiesBuilt by Case Jones, a former VP of Information Security who took doxy.me from zero to SOC 2 Type 2. doxy.me is not affiliated with 93 Compliance and has not endorsed it.
Questions
Do we have to rewrite our policies?
No. Upload them as they are. If a test finds a gap, the assistant suggests the smallest change as a tracked edit, and you decide whether to accept it.
Will you change our documents without asking?
No. Every change is a suggestion until the document’s owner accepts it, and every version is kept.
What does it cost if we only need some of this?
Uploading, testing, the assistant, procedures, queues and audits are free. You pay only for training records: $10 per employee per year, the same for 5 people or 1,000.
Our policies came from a consultant or a template. Is that a problem?
Not at all. That is where most companies start. The tests show which parts fit how you actually work, and the team can tell you where the work has moved on.
Who sees our policies?
Only the people you invite. An auditor sees only the audit period you give them, read-only, until their access ends.
Starting from nothing instead? Build your policies free.