# Frequently Asked Questions

Find answers to common questions about creating, managing, and mapping policies in Sprinto.

***

#### **1. What types of documents can I create in the Policies module?**

Sprinto supports three types of documents:

* **Policy** – Describes what rule or requirement must be followed.
* **Procedure** – Explains how a policy is to be implemented.
* **Document** – A general artefact such as an ISMS scope or audit charter.

***

#### **2. Can I use templates to create policies?**

Yes. Sprinto offers pre-filled templates that are mapped to your enabled frameworks (e.g. ISO 27001, SOC 2). You can customise these before sending them for approval.

***

#### **3. Can I edit a policy after it becomes active?**

No. Once a policy is active, it cannot be edited directly. You must create a **new version** to update the content.

***

#### **4. What happens when I upload a PDF policy?**

Uploaded policies are non-editable. They must be approved before they can be used. If changes are needed later, you must upload a new version of the file.

***

#### **5. Can I assign multiple reviewers to a document?**

Yes. You can assign multiple reviewers, who can leave comments and suggestions. However, only one **approver** can approve the document.

***

#### **6. What is the difference between a reviewer and an approver?**

* **Reviewer** – Can add and reply to comments on draft content, but cannot approve the document.
* **Approver** – Has final approval rights and can send the document to active status.

***

#### **7. Why is 'Select from library' not clickable?**

The option is enabled only when:

* Your organisation has an active compliance framework (e.g. PCI DSS or ISO 27001).
* The selected framework supports document templates via the Sprinto library.

***

#### **8. Can I map controls to a policy?**

Yes. You can manually map controls or use **Sprinto AI** to suggest relevant controls. Mapping is essential to meet framework evidence requirements.

***

#### **9. Why can’t I change control mappings on some documents?**

Policies created from templates have predefined control mappings that cannot be modified. For uploaded documents, control mapping is allowed only after the document is approved.

***

#### **10. Can I re-enable a disabled policy?**

Yes. Go to the **Disabled** section in the All policies & docs tab, open the policy, and click **Enable**.

***

#### **11. Can I track which employees have acknowledged a policy?**

Yes. Use the **Acknowledgement status** tab to track acknowledgement progress across your organisation. You can view employee-wise and policy-wise status.