AttestFlow
Read receipts for policies in Confluence. Who has read and acknowledged which version? For the audit, an export instead of a scavenger hunt.
The problem
The policies live in Confluence, maintained and versioned. Then the auditor asks: have all 140 people read version 7 of the access policy? And suddenly someone is collecting emails, surveys and signature lists. With the next change, it starts all over again.
What it does
- Campaigns: pick pages and groups, set a deadline. Everyone affected sees on the page itself what needs acknowledging, and confirms with one click.
- New version, new acknowledgement: when a policy changes, people are automatically asked again. New colleagues in the group are picked up on their own.
- Evidence export as CSV: who, which page, which version, when. Mapped to ISO 27001:2022 and NIS2. Evidence, not a compliance promise.
Who it's for
ISMS and compliance owners in organisations of fifty to a thousand people who already keep their security policies in Confluence and have an ISO 27001 or NIS2 audit ahead of them.
Where things stand
Runs on test sites, including the export and an overview of who's still outstanding. Built on Atlassian Forge and "Runs on Atlassian": your data never leaves Atlassian. I'm now looking for organisations to test it in real use.
Your auditor wants to know who has read the policies?
Request beta access