---
schema_version: "1"
id: d6da25423b9634f5f728e81c17770e24c3508d76e1bbc3c8cb08095ca1d6dcc0
title: Policy Management for IT Compliance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_cmpl_policy_mgmt_parent.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_cmpl_policy_mgmt_parent.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4bf14663d536006793f7efa3a8d13868e1a7671b50b1d9eaccec2e198ee3475f
description: Establish foundational IT rules by centrally managing the full policy lifecycle in the IT Compliance app. Translate regulations such as SOC 2, HIPAA, or ISO 27001 into actionable guardrails and replace disconnected spreadsheets and manual emails with an audit-ready system of action.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Policy Management for IT Compliance

Establish foundational IT rules by centrally managing the full policy lifecycle in the IT Compliance app. Translate regulations such as SOC 2, HIPAA, or ISO 27001 into actionable guardrails and replace disconnected spreadsheets and manual emails with an audit-ready system of action.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

## Policy Management Tasks

The IT Compliance app standardizes how you author, distribute, and track organizational policies.

- Draft and Author Policies: Use generative AI to extract clauses from legacy documents or create formal text based on regulatory sources and industry templates.
- Author in Microsoft 365: Draft and revise policies directly in Microsoft Word. Edits sync back to Salesforce, which remains the system of record.
- Distribute and Track Acknowledgments: Launch communication campaigns to notify employees of new policies or updates to existing policies. Employees can review and digitally sign documents within the Policy Hub on the portal.
- Capture Audit Evidence: Maintain verifiable logs that record timestamps, user IDs, and specific policy versions for every digital signature.
- Map Regulatory Traceability: Connect each regulation, external or internal, to the policies, controls, and risks that satisfy it for end-to-end traceability.

- **[Set Up Policy Management Features for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_cmpl_setup_policy_mgmt_parent.htm&release=264.0.0&type=5)**  
    Configure the foundational settings required to translate regulatory requirements into actionable internal standards. Set up the policy framework by enabling authoring tools, integrating with Microsoft 365 for document collaboration, and configuring the communication channels used to distribute policies and track employee acknowledgments.
- **[Work with Policies for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_cmpl_work_with_policies.htm&release=264.0.0&type=5)**  
    Manage the end-to-end lifecycle of your internal standards to ensure they are accurate, organized, and audit-ready. Draft policy clauses, map them to regulatory requirements, and preview documents before activating policies. Then, track employee acknowledgments in real time to verify organizational compliance.