Policies, Documents & Data Protection: Know which version of each policy is in force, and who has read it.
Policies live as stray files, and no one is sure which version is current.
Each donor’s due-diligence questionnaire asks for the same documents again. Data protection adds legal deadlines of its own.
Relief One, Safety, risk & compliance
How it works
Policies and due-diligence documents, ready when asked.
- Upload a policy. The AI drafts its title, category, summary, tags and dates; it stays a draft until a person publishes it.
- Keep versions. Everyone reads the version in force; an update waits beside it until published; nothing is ever deleted.
- Keep the core pack ready. Registration, statutes, financial statements, certificates, references, attached to any application.
- Run data protection. Registers of processing, data-subject requests and breaches, each with its legal clock.
What it does.
- Policy library
- Draft, restricted, published, with review-date reminders.
- Drafts from an upload
- The AI drafts title, category, summary and dates; a person publishes.
- Versions
- Live, update waiting and previous, compared side by side.
- Read and accepted
- New joiners read and accept the policies in force, tracked per person.
- Core documents
- The due-diligence pack and company fact sheet, kept current.
- Ask your policies
- The AI answers from the full text of your policies.
- Data-protection registers
- Processing register, data-subject requests and breaches, with their legal deadlines.
- Data-protection help
- Answers to data-protection questions from your own registers and policies, for your DPO to check.
- GDPR in the workflows
- Candidate retention and erasure, image consent, offboarding.
The full list
- Policy library
- Draft / Restricted / Published; review-date reminders; “new policy” on everyone’s Home.
- Versions
- Live, Update waiting, Previous; side-by-side comparison.
- Core documents and company fact sheet
- The due-diligence pack for a grant application, with each document’s validity date.
- Ask your policies
- The AI answers “what does our data-protection policy say about…” from the full text; it can add a policy only as a draft.
- Processing register
- with Excel import.
- Data-subject requests
- With their 1- or 3-month deadline.
- Breach register
- With 24 / 48 / 72-hour clocks, a severity score and advice on notifying the regulator.
- Action plan and annual report
- From an evidence checklist: the AI suggests where each piece of evidence goes, a person files it.
- Data-protection help (“Virtual DPO”)
- Answers data-protection questions from your registers and policies; your DPO checks them, and it is not legal advice.
- GDPR in the workflows
- Candidate retention and self-erasure, image consent checked before a post is approved, offboarding.
What makes the difference
- Every new joiner reads and accepts the policies in force.
- Logging a breach starts the 72-hour notification countdown.
- A donor’s due-diligence questionnaire is answered from the core pack.
With your AI agent
One question can cross several modules.
Your AI can propose a change to a procedure in the skills library; a person publishes it.
- A question
- “What changed in the safeguarding policy, and who still has to read it?”
- Reads
- Policies, Documents & Data Protection, Learning & Training, Workspace: Home, Drive, Calendar & Office
- Comes back
- A summary of the changes, and a reminder drafted (To validate)
- On this module’s pages
- Title, summary and tags drafted from an upload, and answers from your policies
Connected to
It shares its records with these modules.
- Grant Radar & Proposals: From the call to the signed grant.
- Recruitment & Onboarding: Hiring in bursts, across countries.
- CRM, Portfolio & Communication: Donor contacts and track record, kept up to date.
- HR & Payroll: Staff and consultants, managed together.
- Your AI Agent: An assistant that works from your own data.
- Learning & Training: Whose certificate runs out next?
- Workspace: Home, Drive, Calendar & Office: Where the team works, wherever it sits.
Need a data protection officer? DP4G, our shared DPO service
Before you book a demo.
How long do we have to answer a data-subject request?
Each request carries its legal deadline, one month or three, from the day it arrives. Breaches have their own clocks: logging one starts 24, 48 and 72-hour countdowns, with a severity score and advice on notifying the regulator.
Can the data-protection help replace our DPO?
No. It answers data-protection questions from your own registers and policies, and your DPO checks what it says. It is not legal advice. For the DPO work itself, the module links to DP4G, our DPO portal.
Can we start with Policies, Documents & Data Protection alone?
Yes. Each organisation starts with the base, then picks its modules. You can start with one and add others later.
Can we switch a module off later?
You can, and its data is kept. A module switched off disappears from menus and search, and switching it back on restores it.
Can you import from our spreadsheets and current tools?
Yes: people, projects, budgets, policies, files (including a one-time import or a live two-way sync with Google Drive), and the content of your existing workbooks. Connectors to your other systems are built as part of the project.
Next module
- Audit, Risk & Internal Control: Controls your auditor can read.
Safety, risk & compliance
- Security & Safety: Report incidents from the field, offline.
- Safeguarding & Complaints: Where concerns are reported and cases handled.
- Audit, Risk & Internal Control: Controls your auditor can read.
- Add to your Relief One
- The base: The part every organisation gets.
- Relief One
Book a demo of Relief One.
Tell us how your organisation works and which modules you are looking at. We show you Relief One on the parts that matter to you.