About Policyseed

Policyseed is a free, open-source generator for the 22 governance policies a company needs for a SOC 2 program, with a paid kit that tailors them to your stack. It is built and run by one independent developer, it stores nothing about you, and it is not affiliated with any auditor or compliance platform.

Who built it

Policyseed is made by an independent software developer who publishes on GitHub as odedmoshe. It grew out of writing the same policy set for several small companies and noticing that the work was mostly the same 20 facts (who owns security, which identity provider, which cloud, what data) substituted into the same 22 documents, with a few paragraphs that changed depending on the answers. That is a template problem, so it became a template engine.

The project is auditor-independent. Policyseed does not partner with, refer to, or take payment from any CPA firm, and it does not resell or integrate with any compliance-automation platform. The guides on this site describe how examinations typically work so you can prepare with whichever firm you choose.

Principles

  • Stateless. No accounts, no database, no email list. The generator runs in your browser. Purchases live at Polar; tailoring is processed by Anthropic’s API and returned to your browser. See the privacy policy for the exact data flow.
  • Open source. The templates, renderer and CLI are Apache-2.0 on GitHub. Anyone can read what a policy says before generating it, diff versions, or run the whole thing offline.
  • Honest copy. Policyseed provides governance policy templates and AI tailoring. It does not make anyone “compliant” or “certified”, and no page on this site says otherwise. The CPA firm performs the examination. Nothing here is legal advice.
  • Pay once. The Audit Kit is $39, one time, with a 14-day refund on request. No subscription, no seat pricing. See pricing and refunds.
  • Deterministic first. The free output is produced by a template renderer, not a model, so the same intake always gives the same documents. AI tailoring is optional and is applied only to the policy statements and procedures, where tool-specific detail helps.

How it is built

The site is a Next.js application. The 22 templates are Markdown files with a small variable and conditional syntax (documented in the docs) and are compiled into the site at build time. The renderer is a few hundred lines with no dependencies and runs identically in the browser and in the CLI. Checkout, license keys and tax are handled by Polar as merchant of record. The Audit Kit’s tailoring uses Claude through Anthropic’s API, and the DOCX, XLSX and ICS files are assembled in the browser and zipped there.

Links

Contact

Bugs, corrections and template improvements: open an issue on GitHub. Purchase questions and refunds: email the support address on your Polar receipt. We do not run a mailing list and will not add you to one.

Frequently asked questions

Who is behind Policyseed?
One independent developer, publishing under the GitHub handle odedmoshe. There is no company behind it beyond the seller account at Polar, no investors and no affiliation with any CPA firm, compliance platform or the AICPA.
Is Policyseed auditor-independent?
Yes. Policyseed does not recommend, refer to or receive payment from any CPA firm. The pages that mention auditors describe what examinations typically involve, in our own words, so you can choose any firm.
Why is there a paid product if the templates are free?
The free generator covers the whole policy set. The Audit Kit pays for the AI tailoring (each kit costs real money in model calls) and the document packaging work. The one-time price funds maintenance of the free templates.
How do I report a mistake in a template or on a page?
Open an issue or pull request on the GitHub repository. Template fixes ship to both the open-source CLI and the hosted generator because they share the same files.