Who owns the policies I generate?

You do, to the extent they are yours to own. The open-source templates are Apache-2.0; the rendered and tailored documents are licensed to you perpetually for any purpose, including editing, internal distribution and sharing with auditors and customers. Policyseed claims no rights in them.

Can a consultancy use Policyseed for clients?

Yes. The Audit Kit is licensed for one company; the Agency licence covers five company packs. Outputs may be delivered to clients. Presenting the outputs as legal advice or as a compliance guarantee is not permitted.

What happens if a tailoring run fails?

Runs that are refused by the model or fail validation are refunded to your license key and are not counted. If a kit cannot be completed, the refund policy applies.

Is a SOC 2 report guaranteed?

No. Policyseed produces governance policy templates and optional AI tailoring. The SOC 2 examination is performed by a licensed CPA firm, which forms its own opinion. No outcome is promised.

Terms of service

These terms govern the Policyseed website, the free generator, the open-source templates and CLI, and the paid Audit Kit and Agency licence. They are written to be read. Effective 2 September 2026.

1. What Policyseed is

Policyseed provides governance policy templates for SOC 2 programs, a generator that fills those templates from your answers, and a paid Audit Kit that tailors the policy statements and procedures using an AI model and packages the results as Word, spreadsheet and calendar files. Policyseed is operated by an independent developer (see about). Purchases are sold by Polar as merchant of record.

2. Not legal, accounting or compliance advice

The templates, generated documents, tailored content, guides and comparison pages are general information about governance practices. They are not legal advice, not accounting advice, and not advice about any particular examination. Policyseed is not a CPA firm and is not affiliated with any CPA firm or with the AICPA. If you need advice about your obligations, engage a qualified professional.

3. Management adopts the policies

A policy becomes yours when your management reviews it, edits it to describe your actual controls, approves it and communicates it. Until then it is a draft. You are responsible for the accuracy of every statement in the documents you adopt, for operating the controls they describe, and for the evidence you present to any auditor, customer or regulator.

4. No compliance guarantee

Policyseed does not represent that use of its templates or Audit Kit will result in any SOC 2 report, any particular opinion from a CPA firm, or compliance with any law, regulation or standard. The examination is performed by the CPA firm you engage, and its outcome depends on your controls and evidence, which Policyseed neither sees nor controls.

5. AI-generated content

The Audit Kit uses a large language model (Claude, via Anthropic’s API) to rewrite sections 4 and 5 of each policy around the tools you named. Model output can be wrong, incomplete or inconsistent with your environment. Every tailored statement must be reviewed by the policy owner before adoption. Where the model refuses or produces output that fails validation, the run is refunded and you may retry.

6. Licence to the outputs

Open-source templates, renderer and CLI. Licensed under the Apache License, Version 2.0, as published in the GitHub repository. You may use, modify and redistribute them, including commercially, subject to that licence’s attribution and notice requirements.

Documents generated by the free generator. The rendered Markdown is derived from Apache-2.0 templates and your own input. Policyseed claims no rights in the rendered documents; use them as you wish.

Audit Kit and Agency outputs. On purchase you receive a perpetual, worldwide, royalty-free, non-exclusive licence to use, copy, modify, and distribute the tailored documents, crosswalk, checklist, forms and calendar for the company or companies the licence covers, including sharing them with auditors, customers, investors and advisors. Policyseed claims no ownership of the outputs and does not require attribution in them. You may not resell the unmodified kit as a product of your own or present it as legal advice.

Licence scope. The Audit Kit covers one company and includes 88 tailoring runs (22 policies times four passes). The Agency licence covers up to five companies and includes 440 runs. Runs are counted by Polar against your license key; only successful runs count. License keys are for your use and may not be shared publicly.

7. Purchases, payment and refunds

The Audit Kit and Agency licence are one-time purchases sold by Polar as merchant of record. Polar’s terms apply to payment, receipts and taxes. Prices are shown on the pricing page and at checkout. Refunds are available within 14 days of purchase on request; see the refund policy. A refund revokes the license key.

8. Acceptable use

Do not use Policyseed to break the law, to generate documents intended to deceive an auditor or regulator about controls that do not exist, to probe or overload the service, or to extract the AI model’s instructions. Do not share license keys publicly. We may block requests that appear abusive.

9. Third-party services

Policyseed depends on Polar (checkout, license keys, tax), Anthropic (AI tailoring), Vercel (hosting) and GitHub (source code). Their availability and terms are outside our control. Our privacy policy explains what each of them receives.

10. Availability and changes

The service is provided as is and may change or be discontinued. Because the Audit Kit is delivered as files you download and keep, discontinuation of the service does not affect kits already downloaded. Unused tailoring runs on a key are honoured for as long as the service operates; if it ceases, purchasers within the previous 14 days can request a refund through Polar.

11. Warranties and liability

To the fullest extent permitted by law, Policyseed is provided without warranties of any kind, express or implied, including fitness for a particular purpose and non-infringement. Policyseed’s total liability for any claim arising from the service is limited to the amount you paid for the product giving rise to the claim in the 12 months before the claim. Nothing in these terms limits liability that cannot be limited by law, and nothing removes consumer rights you have under the law of your country.

12. Governing law

These terms are governed by the law of the operator’s place of business, without prejudice to any mandatory consumer protection you are entitled to where you live. Disputes will first be raised by email so that they can be resolved informally.

13. Changes to these terms

Changes are published on this page with a new effective date and are visible in the site repository’s history. Continued use after a change means acceptance of the revised terms; purchases are governed by the terms in force at the time of purchase.

14. Contact

Open an issue on the GitHub repository or email the support address shown on your Polar receipt. See also privacy, refunds and about.

Frequently asked questions

Who owns the policies I generate?: You do, to the extent they are yours to own. The open-source templates are Apache-2.0; the rendered and tailored documents are licensed to you perpetually for any purpose, including editing, internal distribution and sharing with auditors and customers. Policyseed claims no rights in them.
Can a consultancy use Policyseed for clients?: Yes. The Audit Kit is licensed for one company; the Agency licence covers five company packs. Outputs may be delivered to clients. Presenting the outputs as legal advice or as a compliance guarantee is not permitted.
What happens if a tailoring run fails?: Runs that are refused by the model or fail validation are refunded to your license key and are not counted. If a kit cannot be completed, the refund policy applies.
Is a SOC 2 report guaranteed?: No. Policyseed produces governance policy templates and optional AI tailoring. The SOC 2 examination is performed by a licensed CPA firm, which forms its own opinion. No outcome is promised.