⚙️ Database Setup Required

Run the SQL below in your Supabase SQL Editor to create the 4 Policy Management tables. This is a one-time setup.

-- IntelliVerify GRC · Policy Management Schema v1.0 -- Paste this in: Supabase Dashboard → SQL Editor → New Query → Run CREATE EXTENSION IF NOT EXISTS "uuid-ossp"; CREATE TABLE IF NOT EXISTS pm_policies ( id UUID DEFAULT uuid_generate_v4() PRIMARY KEY, policy_code TEXT UNIQUE NOT NULL, title TEXT NOT NULL, description TEXT, content TEXT, -- Sanitised HTML (DOMPurify) category TEXT DEFAULT 'General', sub_category TEXT, frameworks TEXT[] DEFAULT '{}', owner_name TEXT, owner_email TEXT, reviewer_name TEXT, reviewer_email TEXT, approver_name TEXT, approver_email TEXT, status TEXT DEFAULT 'Draft' CHECK (status IN ('Draft','Under Review','Approved','Published','Expired','Archived')), version TEXT DEFAULT '1.0', effective_date DATE, expiry_date DATE, review_frequency TEXT DEFAULT 'Annual', next_review_date DATE, tags TEXT[] DEFAULT '{}', visibility TEXT DEFAULT 'Internal', mandatory BOOLEAN DEFAULT true, acknowledgement_required BOOLEAN DEFAULT true, acknowledgement_deadline_days INTEGER DEFAULT 30, health_score INTEGER DEFAULT 0, -- 0-100 auto-calculated org_id TEXT DEFAULT 'IVAS', created_by TEXT, updated_by TEXT, created_at TIMESTAMPTZ DEFAULT NOW(), updated_at TIMESTAMPTZ DEFAULT NOW(), published_at TIMESTAMPTZ, archived_at TIMESTAMPTZ ); CREATE TABLE IF NOT EXISTS pm_policy_versions ( id UUID DEFAULT uuid_generate_v4() PRIMARY KEY, policy_id UUID REFERENCES pm_policies(id) ON DELETE CASCADE, version TEXT NOT NULL, title TEXT, content TEXT, change_summary TEXT, changed_by TEXT, changed_at TIMESTAMPTZ DEFAULT NOW() ); CREATE TABLE IF NOT EXISTS pm_approvals ( id UUID DEFAULT uuid_generate_v4() PRIMARY KEY, policy_id UUID REFERENCES pm_policies(id) ON DELETE CASCADE, policy_code TEXT, policy_title TEXT, stage TEXT DEFAULT 'Review', assignee_name TEXT, assignee_email TEXT, status TEXT DEFAULT 'Pending' CHECK (status IN ('Pending','Approved','Rejected','Delegated')), comments TEXT, action_at TIMESTAMPTZ, due_date DATE, created_at TIMESTAMPTZ DEFAULT NOW() ); CREATE TABLE IF NOT EXISTS pm_acknowledgements ( id UUID DEFAULT uuid_generate_v4() PRIMARY KEY, policy_id UUID REFERENCES pm_policies(id) ON DELETE CASCADE, policy_code TEXT, user_name TEXT NOT NULL, user_email TEXT NOT NULL, user_department TEXT, status TEXT DEFAULT 'Pending' CHECK (status IN ('Pending','Acknowledged','Overdue')), deadline DATE, acknowledged_at TIMESTAMPTZ, reminder_count INTEGER DEFAULT 0, created_at TIMESTAMPTZ DEFAULT NOW() ); -- Enable Row Level Security ALTER TABLE pm_policies ENABLE ROW LEVEL SECURITY; ALTER TABLE pm_policy_versions ENABLE ROW LEVEL SECURITY; ALTER TABLE pm_approvals ENABLE ROW LEVEL SECURITY; ALTER TABLE pm_acknowledgements ENABLE ROW LEVEL SECURITY; -- Open access for development (tighten per role in production) CREATE POLICY "pm_pol_all" ON pm_policies FOR ALL USING (true) WITH CHECK (true); CREATE POLICY "pm_ver_all" ON pm_policy_versions FOR ALL USING (true) WITH CHECK (true); CREATE POLICY "pm_app_all" ON pm_approvals FOR ALL USING (true) WITH CHECK (true); CREATE POLICY "pm_ack_all" ON pm_acknowledgements FOR ALL USING (true) WITH CHECK (true); -- Indexes for performance CREATE INDEX IF NOT EXISTS idx_pm_status ON pm_policies(status); CREATE INDEX IF NOT EXISTS idx_pm_category ON pm_policies(category); CREATE INDEX IF NOT EXISTS idx_pm_expiry ON pm_policies(expiry_date); CREATE INDEX IF NOT EXISTS idx_pm_ver_pid ON pm_policy_versions(policy_id); CREATE INDEX IF NOT EXISTS idx_pm_app_pid ON pm_approvals(policy_id); CREATE INDEX IF NOT EXISTS idx_pm_ack_pid ON pm_acknowledgements(policy_id);

1Click Copy SQL above and go to your Supabase Dashboard → SQL Editor

2Paste the SQL, click Run

3Return here and click Reload

📊 Policy Dashboard

Real-time policy governance overview · Auto-expiry detection running

Total Policies

—

All statuses

Published

—

Live & active

Pending Approval

—

Awaiting action

Drafts

—

Work in progress

Expiring ≤30d

—

Renewal required

Pending Acks

—

Awaiting sign-off

📋 Recent Policies

⚡ Action Required

📊 Policy Status

🔗 Framework Coverage

📚 Policy Library

Loading…

0 policies selected

	Code	Title & Description	Category	Frameworks	Status	Ver	Health	Owner	Expiry	Actions
Loading policies…

✅ Approval Queue

Policies awaiting review or approval action

Policy	Category	Stage	Submitted	Owner	Due	Actions
Loading…

🤝 Acknowledgements

Track policy sign-off status across your organisation

Recipient	Policy	Department	Status	Deadline	Acknowledged	Actions
Loading…

📈 Policy Analytics

Compliance metrics, coverage analysis, and trend reporting

Compliance Rate

—%

Published / Total

Ack Completion

—%

Avg acknowledgement

Overdue Reviews

—

Past review date

Expiring (30d)

—

Needs renewal

Policies by Category

Status Breakdown

Framework Coverage

Review Frequency

Policy Health Score Distribution

🗺️ Compliance Matrix

Framework coverage mapped across all policy categories

Building matrix…

📑 Template Library

30+ pre-built policy templates — click to create from template

📥 Bulk Import

Import policies from CSV or paste data directly

📂 Upload CSV File

📂

Click to upload or drag & drop CSV file
Max 500 policies per import

📋 Paste Data

CSV Data (title, category, status, owner, frameworks)

⚙️ Settings

Configure Policy Management module

🤖 AI Configuration

Anthropic API Key

Used for AI-assisted policy drafting. Stored locally in your browser.

AI Model

📋 Policy Defaults

Default Review Frequency

Acknowledgement Window (days)

Default Visibility

📊 Module Information

Module

PM01

Phase

Phase 1

Version

1.0.0

Status

● Active

URID

URID_GRC_2026_PM01

🔐 Security

✅XSS protection via DOMPurify 3.1.6

✅Content Security Policy (X-Frame-Options)

✅Input validation on all form fields

✅SQL injection prevention (Supabase parameterised queries)

✅Session expiry (8h) with Google OAuth

✅Row Level Security on all Supabase tables

✅No eval() — strict mode enforced