Frequently Asked Questions

Get quick answers to common questions about creating, reviewing, and managing policies in Sprinto’s compliance platform.

Find answers to common questions about creating, managing, and mapping policies in Sprinto.

---

1. What types of documents can I create in the Policies module?

Sprinto supports three types of documents:

• Policy – Describes what rule or requirement must be followed.

• Procedure – Explains how a policy is to be implemented.

• Document – A general artefact such as an ISMS scope or audit charter.

---

2. Can I use templates to create policies?

Yes. Sprinto offers pre-filled templates that are mapped to your enabled frameworks (e.g. ISO 27001, SOC 2). You can customise these before sending them for approval.

---

3. Can I edit a policy after it becomes active?

No. Once a policy is active, it cannot be edited directly. You must create a new version to update the content.

---

4. What happens when I upload a PDF policy?

Uploaded policies are non-editable. They must be approved before they can be used. If changes are needed later, you must upload a new version of the file.

---

5. Can I assign multiple reviewers to a document?

Yes. You can assign multiple reviewers, who can leave comments and suggestions. However, only one approver can approve the document.

---

6. What is the difference between a reviewer and an approver?

• Reviewer – Can add and reply to comments on draft content, but cannot approve the document.

• Approver – Has final approval rights and can send the document to active status.

---

7. Why is 'Select from library' not clickable?

The option is enabled only when:

• Your organisation has an active compliance framework (e.g. PCI DSS or ISO 27001).

• The selected framework supports document templates via the Sprinto library.

---

8. Can I map controls to a policy?

Yes. You can manually map controls or use Sprinto AI to suggest relevant controls. Mapping is essential to meet framework evidence requirements.

---

9. Why can’t I change control mappings on some documents?

Policies created from templates have predefined control mappings that cannot be modified. For uploaded documents, control mapping is allowed only after the document is approved.

---

10. Can I re-enable a disabled policy?

Yes. Go to the Disabled section in the All policies & docs tab, open the policy, and click Enable.

---

11. Can I track which employees have acknowledged a policy?

Yes. Use the Acknowledgement status tab to track acknowledgement progress across your organisation. You can view employee-wise and policy-wise status.

---

12. Can a register be mapped to multiple zones?

Yes. A register can be linked to multiple zones using the multi-select zone field.

---

13. Do changes inside a register affect policies globally?

Yes. Policy changes made within a register are reflected globally across Sprinto.

---

14. What happens when a register is archived?

Archiving removes active register associations and deactivates linked monitors.

---

15. Can I send acknowledgement requests to only selected staff?

Yes. You can target specific staff members using the Select staff option.

---

16. Can acknowledgement emails be customised?

Yes. You can customise both the subject and message body before sending the request.

---

17. Can archived registers be restored?

Yes. Archived registers can be restored using Unarchive register.

---

18. Are acknowledgement requests tracked individually?

Yes. The Acknowledgement Status tab tracks recipient-level acknowledgement.

---

Can employee groups be used for acknowledgement targeting?

Yes. Policy applicability can be configured using employee groups from your identity provider.