In short: usecure uPolicy is a policy management product that stores security and compliance policies, sends them to staff for e-signature, tracks who has signed, chases non-signers and schedules re-signs. It offers pre-made templates or uploads of your own PDFs, version control, an end-user policy portal and exportable acknowledgement records for audits.
Why policy acknowledgement matters
Most organisations have an acceptable use policy, a data protection policy and perhaps a remote working or password policy. Far fewer can show who has read the current version. That gap becomes a problem when an auditor, insurer or customer asks for evidence, or when an incident happens and it turns out the person involved never saw the rule they broke.
Policy acknowledgement is a recurring requirement in frameworks such as ISO 27001, and it is part of showing "appropriate organisational measures" under UK GDPR. It also supports training: a short lesson on handling personal data lands better when it points to the policy people have just signed. See information security awareness training for the ISO 27001 angle and GDPR training for staff for data protection.
What uPolicy does
| Feature | What it gives you |
|---|---|
| Policy templates | Multilingual, pre-made security and compliance templates that you can adapt; usecure's plan page lists more than 60 policy documents |
| Your own policies | Upload existing policies as PDFs, or write new ones from a template or from scratch |
| E-signature tracking | Each person's status shown as pending, visited or signed |
| Automated reminders | Non-signers are chased automatically, and you can schedule announcements when a policy changes |
| Re-sign schedules | Ask staff to re-acknowledge key policies on a set cadence, such as every year |
| Version control | Built-in versions, categories and owners, so you know which version each person signed |
| New starters | Policies are issued automatically to new users picked up by directory sync |
| Audit evidence | Real-time dashboards, exportable acknowledgement records and read-only access for external auditors |
How a uPolicy rollout works
- Gather your current policies and decide which ones every member of staff must sign, and which apply only to certain teams
- Upload them, or adapt usecure templates where you have gaps, and assign an owner to each
- Decide who each policy applies to; new starters picked up by your Microsoft 365 or Google Workspace sync are issued policies automatically
- Send for signature and let automated reminders chase anyone who has not signed
- Set a re-sign schedule for core policies and update versions when something changes
- Export acknowledgement records for your auditor, insurer or board pack
Staff sign policies in the usecure End User Portal, the same place they find their training, so there is one link to remember rather than another system.
Which policies to put in uPolicy first
Start with the handful that relate directly to staff behaviour:
- Acceptable use: devices, software, email and internet use
- Data protection and information handling: classification, sharing and secure disposal
- Passwords and authentication: passphrases, password managers and MFA
- Remote and hybrid working: home networks, public Wi-Fi and screen privacy; see remote working security training
- Payments and supplier changes: the call-back verification rule for bank detail changes; see business email compromise training
- Use of generative AI tools: what may and may not be pasted in; see safe use of AI at work
- Incident reporting: who to tell and how quickly
Keep each one short and readable. A two-page policy that people actually read beats a twenty-page document they sign without opening.
uPolicy alongside the rest of usecure
uPolicy is included in the core usecure plan with uLearn, uPhish and uBreach Starter, licensed per user. Signature status is one of the signals usecure uses when assessing human risk, so a person who has not signed the acceptable use policy is visible next to their training and phishing results.
Other platforms we supply also offer policy features, such as the policies with e-signature in Breach Secure Now. If you want to compare options, the vendors hub lists every platform we supply.
How we help
We can review your existing policies for gaps, load them into uPolicy, set up groups and re-sign schedules, and include acknowledgement figures in your regular reporting. Pricing is part of the per-user usecure plan, so ask us for a quote.
Contact us to get your policies signed, tracked and audit-ready.
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Can we upload our own policies to usecure uPolicy?
Yes. You can upload existing policies as PDFs, or create policies from usecure's pre-made templates or from scratch.
Does uPolicy remind staff to sign policies?
Yes. Reminders to non-signers are automated, and you can set re-sign schedules so core policies are acknowledged again on a regular cadence.
Can auditors see uPolicy records?
Yes. Acknowledgement records can be exported, and usecure offers read-only access for external auditors.
Is uPolicy included in the usecure plan?
Yes. uPolicy is part of the core usecure plan alongside uLearn, uPhish and uBreach Starter, licensed per user.