You change the AI policy. Polaris says the IT security policy has to follow.
Without anyone having to remember it.
The portal · To handle
AI policy
Version 3 · Approved 4 October 2026
Changed by you
IT security policy
Version 2 · Approved 12 June 2026
Has to follow
Checked against the GDPR · Updated 11 October 2026
Documents do not age on their own. They go wrong because something else changed, and nobody had a reason to go looking for the knock-on effects.
Polaris keeps track of how they connect. AI generates from quality-assured regulatory content with the statute cited, you review and approve. Nothing leaves the system without somebody at your end signing it off.
The same principle as a pre-filled tax return: it arrives filled in, you check it and approve it.
Three layers, in that order.
Layer one
Analysis
You answer questions about your own operation. No regulations, just how you work. Out comes the coverage per area, what is missing and which statute the requirement comes from. The approved analysis governs everything produced after it.
After that you know where the information is and whether it covers what you need.
Layer two
Production
The drafts arrive filled in for your company, with the statute printed on every document. You read them, change what needs changing and approve them. Nothing leaves the system without somebody at your end signing it off.
After that you know that what sits in the system is the version that applies.
Layer three
Monitoring
The rules change a few times a year. Your own documents change more often than that. Change one document and you see which others are affected. The year wheel says when something is due again. You see what is waiting for approval and what is coming up against a deadline.
After that you know it holds together, not only on the day the documents were created.
Everything an employer has to have is included. What only some have to have is an add-on.
The six statutory areas are in every tier, from the smallest upwards. The add-ons are what proves the rule. A whistleblowing service, NIS2, the full system log, the ESG questionnaire and additional companies sit outside it, because they apply to some companies rather than all of them.
Four tiers, the same three layers.
What differs is how much of the work you drive yourself.
| Tier | What you get |
|---|---|
| Nuläge | You see the analysis and the gap list. No documents. |
| Ordning | You get the plan and the documents. You set the pace. |
| Kontroll | The plan is run for you. You hear about it when a rule moves or something falls due. |
| Styrning | The same order across several companies, with several approval steps and an owner for each. |
The scope follows the product specification · Checked 11 October 2026
See what the tiers costFour steps to get there.
- 1 Take the Health Check. Questions about your everyday. You can stop whenever you want. Where you stand per area and what is likely to bite first.
- 2 Register a free account and complete your answers. Access to the analysis.
- 3 Read the report. A gap list per area, with the statute and the consequence for each gap. The diagnosis is complete, the remedy is not included.
- 4 Take out a subscription. Drafts of the documents you are missing, generated from the answers you have already given.
Before go live, step four is a place in Inner Circle, with the detailed analysis as the benefit.
Polaris does not write legal opinions and does not replace counsel in a dispute. What you get is the documents an employer has to have, kept current.