Audit Kit, $39 one-time

The 22 policies tailored to your stack, as Word documents, with the crosswalk and forms a CPA firm asks for.

Claude rewrites the Policy Statements and Procedures of every policy for the tools you named. Your browser then builds the DOCX, XLSX and ICS files into one ZIP. Nothing is stored on a server; the CPA firm you engage performs the examination.

Buy the Audit Kit, $39See the sample

One company per kit. Five companies for $149 with the Agency license. Full refund within 14 days on request.

What is in the ZIP

Six kinds of file, built on your machine

FileWhat it isWhy it is there
policies/01-…22-<slug>.docx22 Word documents, one per policy, with a document control table (owner, approver, version, effective date, review cadence) and a footer carrying the generation time and intake hash.Auditors and approvers work in Word. Sections 4 and 5 are tailored; the other seven sections are the deterministic template text.
policies-markdown/01-…22-<slug>.mdThe same 22 policies as Markdown.Commit them to a repository so every later change has a diff and an author.
crosswalk.xlsxThree sheets. Crosswalk: every Trust Services Criterion in your scope (the 33 common criteria CC1 to CC9, plus Availability A1 and Confidentiality C1 when selected; up to 38), each mapped to the policy and section that addresses it, with a plain-language paraphrase. Evidence Checklist: one row per criterion, policy and artifact, with owner and status columns. Policies: owner, review cadence and next review date per policy.The first thing a CPA firm asks for is where each criterion is addressed. The checklist becomes your evidence folder's index.
policy-acknowledgment.docxA per-employee acknowledgment form listing all 22 policies, plus a roster page to track who has signed.Signed acknowledgments are the standard evidence that people know what is expected of them (CC1, CC2).
review-calendar.icsTwelve all-day events starting the month after your effective date: eleven monthly review sessions that cover two policies each (naming the owner role of every policy) and an annual attestation of the whole set that repeats yearly. The cadence you chose is noted in the attestation.A policy whose review date has passed reads as unmaintained. Import the file into Google Calendar, Outlook or Apple Calendar once.
README-auditor-questions.mdWhat is in the ZIP, how to adopt the set, which policies were tailored, and the 25 questions auditors ask about policies with a suggested answer and a pointer to the document that supports it.So the person answering the auditor's document request does not start from a blank page.

How tailoring works

Deterministic templates first, the model second, you last

The model never writes a policy from scratch. It rewrites two sections of a policy that already exists, and you read the result before anyone else does.

  1. 1

    You answer the 23 questions

    Same intake as the free generator: company, stack, data types, owners, scope, cadence. Your answers are kept in your browser and travel with the checkout as metadata; there is no account to create.

  2. 2

    Polar takes payment and issues a license key

    Polar is the merchant of record and handles VAT and receipts. The license key is the entitlement: it allows four generation passes, and Polar's usage counter is the only record of how many you have used.

  3. 3

    Claude rewrites sections 4 and 5, one policy at a time

    For each of the 22 policies, the download page renders the deterministic base text and sends it with your intake to a stateless API. Claude returns new Policy Statements and Procedures that name your identity provider, cloud, source control, MDM, vendors and contacts, plus implementation notes for your tools. Sections 1 to 3 and 6 to 9 stay as the template wrote them. A refused or malformed response refunds the run so you can retry that policy from the download page.

  4. 4

    Your browser builds the ZIP

    The DOCX, XLSX, ICS and README files are generated on your machine from the tailored Markdown and zipped there. Nothing is written to a server, and there is no database on our side to hold your policies.

  5. 5

    You review, adopt, and hand the set to your CPA firm

    Read every tailored statement with the tools open and change anything that is not true of your environment. Management approves the set, everyone acknowledges it, and the CPA firm performs the examination. The kit prepares the policy portion of that examination; it does not replace it.

See the before and after on a real policy

The sample page shows the deterministic Access Control Policy next to the tailored version for a fictional company, Northwind Cloud Inc, and lets you build the whole sample ZIP in your browser.

See the sample

Pricing

One-time, no subscription

The free generator stays free. Pay once for the kit; there is nothing to cancel. Compare all three options on the pricing page.

Audit Kit

One company

$39one-time, one company

The same 22 policies, tailored to your stack, plus the audit-prep documents.

  • Claude rewrites Policy Statements and Procedures for the tools you named
  • 22 Word documents (DOCX) with document control tables, plus Markdown
  • crosswalk.xlsx: every criterion in your scope (up to 38) mapped to policy and section, with an evidence checklist
  • policy-acknowledgment.docx: per-employee form and roster
  • review-calendar.ics: eleven monthly review sessions plus an annual attestation
  • README-auditor-questions.md: 25 questions auditors ask, with answers pointing into the kit
  • 4 generation passes (88 policy runs) on one license key
  • 14-day refund on request

Agency

$149one-time, five companies

Five Audit Kits on one license key, for consultants, fractional CISOs and MSPs.

  • Everything in the Audit Kit, for five client companies
  • 440 policy runs (20 passes) on one key
  • Run each company from its own intake; nothing is shared between them
  • Deliver the DOCX set under your own engagement
  • 14-day refund on request

Prices in USD. Polar, the merchant of record, collects any applicable VAT or sales tax at checkout and accepts discount codes. Every purchase can be refunded in full within 14 days on request; see the refund policy.

14-day refund, on request, no reason needed

If the kit is not what you expected, email the support address on your Polar receipt with your order id within 14 days. Polar refunds the full amount including tax and revokes the license key; the files you already downloaded remain yours.

Read the refund policy

Frequently asked questions

What exactly does the AI change, and what does it leave alone?
Only section 4 (Policy Statements) and section 5 (Procedures) of each policy are rewritten, using your intake answers and the deterministic base text as the starting point. Purpose, Scope, Roles, Exceptions, Enforcement, Review Cadence and Revision History are the template text with your answers filled in. Each tailored policy is marked as such in its document control table so you know which sections to read most carefully.
What is a generation pass, and why four?
One pass tailors all 22 policies. The Audit Kit license key allows 4 passes (88 policy runs), which covers a first run, a rerun after you correct your intake, and two more for later revisions. Runs that fail or are declined by the model are not counted. The Agency license carries 440 runs for five companies.
What do you store?
Nothing. Policyseed has no database and no email service. Polar keeps the order, your receipt and the checkout metadata (your intake answers and a hash of them) as the merchant of record. Each tailoring request is sent to the Anthropic API and the response is returned to your browser; consult Anthropic's data retention terms for the API. The generated files exist only on your machine.
How do I get the files again later?
The ZIP is assembled in your browser, so save it somewhere durable such as the repository that holds your policies. Your license key is saved in the browser you bought from and is also in your Polar receipt email; paste it on the download page in any browser to run further passes while runs remain on the key. If you lose the key, contact the support address on your Polar receipt with the order id.
Will an auditor accept AI-tailored policies?
Auditors examine whether the policies are approved, communicated, and true of your environment, not who typed them. The tailoring makes the text specific to your tools so that it is easier to keep true; you remain responsible for reading and adopting it. Policyseed does not claim any examination outcome and is not legal advice.
What if it is not what I expected?
Email the support address on your Polar receipt with your order id within 14 days and you get a full refund, no reason required, even after you have downloaded the kit. The license key is revoked; the files you already have are yours to keep.

Policyseed provides governance policy templates and AI tailoring. It is not legal advice and not a compliance guarantee. Management adopts the policies; the CPA firm performs the SOC 2 examination.