Approval Paths
Configure and manage multi-step approval workflows for policies in Sprinto using Approval Paths with custom steps, approvers, and approval logic.
Approval Paths enable you to configure structured, multi-step approval workflows for policies in Sprinto. Each workflow consists of sequential steps, and each step may include one or more approvers. You can specify whether approval is required from all approvers in a step or from any one of them. You can also define due dates for each step.
Approval Paths help organisations standardise policy reviews, enforce accountability, and maintain audit-ready records of approval decisions.
Availability
Approval Paths are available only on Enterprise plan. If you are on another plan, this feature will not be accessible.
Features and Use Cases
Key Features
Multi-step workflows: Configure one or more approval steps that run in sequence.
AND/OR logic:
Everyone must approve (AND): All approvers must approve for the step to pass.
Anyone may approve (OR): The first approver to act determines the step outcome.
Automatic step progression: When a step meets its approval requirement, the next step begins automatically.
Rejection flow: If any step is rejected, the policy is marked as rejected and returned to the author.
Resubmission: When a policy is resubmitted after changes, the workflow restarts from Step 1.
Task assignment: Each active step creates tasks for its approvers.
Withdraw request: Authors or administrators can withdraw an approval request while it is in progress.
Approver actions: Approvers can approve, reject, and add comments to provide context.
Use Cases
Multi-stakeholder policy review
Policies require review and approval from several roles such as the Infosec Officer, CISO, and CEO.
Ordered approval cycles
A strict order of approval is required. For example: Infosec Officer → CISO → CEO.
Fast approvals through OR logic
A step can use OR logic so that any one approver may approve and move the process forward.
Procedure
1. Create an Approval Path
Step 1: Navigate to Approval Paths
Sign in to the Sprinto dashboard.
Navigate to Settings and click Approval Paths.
Review the list of existing approval paths, including their status, entity type, and last edited information.
Step 2: Start creating an approval path
Select Add approval path.
In the drawer, enter the approval path name.
Select Policy as the entity type (supported in Phase 1).
Enable or disable the approval path as required.
Step 3: Configure Step 1
Choose whether approval is required from Everyone or Anyone.
Add one or more approvers. Approvers may be users or roles.
Select an approval period. You may choose 2 days, 7 days, 15 days, or specify a custom value.
Step 4: Add more steps (optional)
Select Add step.
Configure the step in the same manner as Step 1.
Add approvers and specify the approval logic and due date.
Step 5: Save the approval path
Review the configuration.
Select Add approval path. The approval path is now available for use and appears in the list of paths.
2. Apply an Approval Path to a Policy
Step 1: Navigate to the Policies section
Go to Policies from the navigation panel.
Select the policy you want to configure.
Step 2: Open the draft version
Select the Draft tab in the policy drawer.
Locate the Status section.
Expand View details.
Step 3: Select an approval path
In the Approval Path field, choose the path you want to apply.
Review the steps, approvers, and due dates that appear.
Continue to the approval process when ready.
3. Send a Policy for Approval
After selecting the approval path, select Send for approval.
The policy status changes to Pending.
Tasks are created for all approvers in the first step.
Approvers see Approve and Reject options for the policy.
4. Approver Actions
Approve
Select Approve.
Add an optional approval comment.
If the step uses OR logic, the first approval completes the step.
If the step uses AND logic, all approvers must approve before the next step begins.
Reject
Select Reject.
Add a mandatory rejection comment.
The policy is marked as Rejected.
The author is notified to revise and resubmit.
Withdraw request
Authors and administrators may withdraw an approval request if the workflow has not completed.
Select Withdraw request.
Confirm the withdrawal.
All pending approval tasks are cleared.
The policy returns to the draft state.
5. Resubmission
If a policy is rejected:
The author updates the policy content.
Select Send for approval again.
The approval path begins again from Step 1.
This ensures that all steps and reviewers reconfirm the updated version.
6. Completion
A policy is marked as Approved when all steps in the approval path are completed successfully. All approver tasks are closed automatically.
Last updated