Skip to content

Policy Center ​

Policy Center is where your organization authors, approves, and maintains internal policies. It gives every policy a controlled lifecycle — from first draft to published record — and keeps that record audit-ready through renewal reminders, comments, and a complete audit trail.

What this is ​

A policy in Modulos is an organization-wide document: an acceptable-use policy, a data-handling policy, an AI governance charter, or any other standing instruction your organization needs to publish, version, and periodically renew.

Policy Center is separate from AI System Governance. The distinction is deliberate:

Policy CenterGovernance (AI Systems)
ScopeOrganization-widePer AI System
Primary artifactsPolicies (versioned documents)Requirements, Controls, Evidence
Lifecycle driverApproval workflow + renewal periodReview and execution workflow
AudienceAll staff or specific rolesAI System teams and reviewers

Policies and governance Controls can reference each other — a Control may cite the policy it operationalizes — but they are managed independently.

Key roles ​

Roles in Policy Center

  • Policy Owner — the user assigned to a policy. Responsible for keeping it current, initiating drafts, and triggering the approval process. Can also archive or restore a policy.
  • Policy Manager — an organization role granted to users who review and approve policy versions. Policy Managers receive a notification when a version is submitted for approval and can approve, reject (with a reason), or publish versions.
  • All members with read access — can view published policies and their version history.

How the continuous governance loop works ​

Once published, the renewal period clock starts. When a renewal window is reached, the policy owner receives a notification prompting them to open a new draft and restart the cycle. This keeps policies from silently drifting out of date.

Every status transition — submission, approval, rejection, publication, archival — is recorded in the policy's audit trail alongside comments, giving auditors a complete, timestamped decision history.