Policy Templates and Updates

Overview

Concord's Policy Builder writes a complete policy from your answers to a few questions. Besides the Privacy Policy, Cookie Policy, and AI Policy, it offers the public documents your customers and regulators ask for, and the internal security policies auditors expect.

To start one, go to Documents → Policies, choose Add Policy, then Create with Policy Builder, and pick a policy type. Choose Show all templates, including other frameworks to see the security and compliance policies, such as Information Security, Acceptable Use, Code of Conduct, Access Control, and Incident Response.

Terms of Service

The rules for using your website, app, or software. The first question asks who your customers are, and each answer has its own questions and sections:

• Consumers (websites and apps): accounts, purchases and refunds, automatically renewing subscriptions and free trials, the EU, EEA, and UK right of withdrawal, user content and how you handle complaints about it, copyright complaints, text message programs, and disputes.
• Businesses (B2B software): service and usage limits, customer data, security and data protection, fees, renewal and termination, confidentiality, warranties, indemnification, a liability cap, and optional SLA, support, and professional services sections.

Both include governing law, how you give notice of changes, contact details, and room for your own clauses.

Data Processing Agreement

The terms your business offers when it processes personal data on behalf of its own customers. It covers every term GDPR Article 28 requires, including security, subprocessors, help with data subject requests, breach notice, deletion, and audits. It handles international transfers by incorporating the EU Standard Contractual Clauses, with the UK Addendum and Swiss adjustments, and can add CCPA service provider terms. Liability follows the cap in your main agreement.

Impressum

The provider identification German law requires on commercial websites and apps: your name, address, legal form and representatives, contact details, supervisory authority, register entry, VAT and business IDs, and the other details the law lists, plus the person responsible for editorial content and a consumer dispute resolution statement. It's written in German by default, or in English if you choose.

Policies and Controls

If you run Controls, a policy generated from a template is linked to the controls it supports, and serves as evidence for them automatically. Open a policy's Controls tab to see those links and the frameworks they support. You can add mappings yourself, or choose Reset to Recommended to go back to the template's suggestions.

Template Updates

Concord keeps its templates current as laws change. When a template you used has been updated, the policy shows that an update is available, and the policy list can show only the policies with updates.

Choose Review Update to see what changes. Updating keeps your own edits: Concord compares your policy with the template paragraph by paragraph and applies only what the update changes. Where you and the update changed the same paragraph, the update's wording is used, and the review tells you how many of your edits that affects. Your previous version always stays in the policy's History.

A policy that was saved as a draft and edited before it was first published, or one you're switching to another language, is replaced as a whole when updated.