Skip to main content

Policy Center overview

Updated over a week ago

Policy Center is where you manage all the policies required for audit readiness and ongoing compliance. You can create, edit, review, publish, and track every policy from one place.

Use this article to understand how the Policy Center works, what actions you can take, and how policies move through their lifecycle.

What you can do in the Policy Center

Action

Description

Create or upload policies

Start from a Drata template or upload your own.

Edit policy content

Update policy language, files, or version history.

Assign approvers and publish

Set up configurable, multi-tier approval workflows.

You can now define tiered approvers and specify actions available at each approval stage. Once all tiers are approved, the policy is ready to publish.

Track versions and status

Monitor draft, approval, and published versions.

Export and archive

Download PDF versions or archive outdated policies.

Know when a change is material or non-material

When editing a policy, you’ll be asked to classify your changes:

Material changes

  • Substantially affect the policy’s intent or scope.

  • Trigger a new approval workflow.

  • Create a major version update (e.g., v1.0 → v2.0).

  • Require personnel acknowledgment once published.

Non-material changes

  • Include small wording updates or formatting adjustments.

  • Create a minor version update (e.g., v1.0 → v1.1).

  • Do not require acknowledgment.

  • Can be published immediately by Policy Owners.

Track your policies at a glance

In the Active policies tab, you'll see key metrics to help you stay ahead of renewals and approvals:

  • Renews soon: Policies with renewal dates in the next 60 days

  • Renewal past due: Policies past their renewal deadline

  • Needs approval: Drafts waiting for approval

  • Ready to publish: Approved policies that haven’t been published yet

Use filters to sort policies by renewal date, status, or owner. You can also use the search bar to quickly find a specific policy.

Use version history to track changes

Each policy includes a Version history tab that shows:

  • All previous versions

  • Who made changes and when

  • Change explanations (if provided)

  • Approval records

  • Download links for each version

This supports audits and internal change tracking.

Manage archived or replaced policies

In the Archived or replaced tab, you can:

  • Restore archived policies

  • View versions that were replaced by custom policies

  • Download previous versions for reference

Delete a policy

You can delete:

  • Draft versions that are no longer needed

  • Custom policies created by your organization

Drata templates and published policies cannot be deleted but can be archived instead.

Did this answer your question?