Skip to content

Policy Center

Policy Center is where your organisation authors, approves, and maintains internal policies. It gives every policy a controlled lifecycle — from first draft to published record — and keeps that record audit-ready through renewal reminders, comments, and a complete audit trail.

What this is

A policy in Modulos is an organisation-wide document: an acceptable-use policy, a data-handling policy, an AI governance charter, or any other standing instruction your organisation needs to publish, version, and periodically renew.

Policy Center is separate from project-level Governance. The distinction is deliberate:

Policy CenterGovernance (Projects)
ScopeOrganisation-widePer AI project
Primary artefactsPolicies (versioned documents)Requirements, controls, evidence
Lifecycle driverApproval workflow + renewal periodReview and execution workflow
AudienceAll staff or specific rolesProject teams and reviewers

Policies and governance controls can reference each other — a control may cite the policy it operationalises — but they are managed independently.

Key roles

Roles in Policy Center

  • Policy Owner — the user assigned to a policy. Responsible for keeping it current, initiating drafts, and triggering the approval process. Can also archive or restore a policy.
  • Policy Manager — an organisation role granted to users who review and approve policy versions. Policy Managers receive a notification when a version is submitted for approval and can approve, reject (with a reason), or publish versions.
  • All members with read access — can view published policies and their version history.

How the continuous governance loop works

Once published, the renewal period clock starts. When a renewal window is reached, the policy owner receives a notification prompting them to open a new draft and restart the cycle. This keeps policies from silently drifting out of date.

Every status transition — submission, approval, rejection, publication, archival — is recorded in the policy's audit trail alongside comments, giving auditors a complete, timestamped decision history.