Platform wireframes · v0.1
Policy Fox

A policy written from how your business runs.

Five short steps. You can pause any time and pick up on another device.

  1. 1Create account
  2. 2Company profile
  3. 3Your plan
  4. 4Invite contributors
  5. 5Start the assessment

Already have an account? Log in to the portal

ANo card here. Email + magic link keeps a 10-person firm from inventing another password; password optional.

Create your account

Work email only. We'll send a link to confirm it.

We read your public site before the first question so examples fit you.
By continuing you agree to the Terms and Privacy Policy.Continue
Policy Fox

A policy written from how your business runs.

Five short steps. You can pause any time and pick up on another device.

  1. ✓Create account
  2. 2Company profile
  3. 3Your plan
  4. 4Invite contributors
  5. 5Start the assessment

Already have an account? Log in to the portal

BProfile drives the regulations list and the interview depth. Chips over free text so the answers are structured. Website research starts now in the background.

Tell us about Harbor Realty Group

This sets the depth of your policy and which regulations we check against.

New YorkConnecticutNew Jersey+ Add stateOutside the US
Client personal dataFinancial / bank detailsCard paymentsHealth recordsEmployee recordsGovernment contracts
Microsoft 365Google WorkspaceAn outside IT providerDropbox / BoxA CRM+ Other
Unsure about any of these? Leave it; the assessment will ask.
BackContinue
Policy Fox

A policy written from how your business runs.

Five short steps. You can pause any time and pick up on another device.

  1. ✓Create account
  2. ✓Company profile
  3. 3Your plan
  4. 4Invite contributors
  5. 5Start the assessment

Already have an account? Log in to the portal

CThe paywall. The tailored preview above the price is the proof it's not a template. Card form sits below the plan choice; prices are placeholders.

Your plan

Based on your profile, here's what Policy Fox will cover for Harbor Realty Group.

23security domains
6applicable regulations
Midpolicy depth (51–200 people)
  • NY SHIELD Act · NY DFS Part 500 · FTC Safeguards Rule · Gramm-Leach-Bliley · PCI DSS SAQ A · 2026 insurer questionnaire
  • Examples tuned to Microsoft 365, an outside IT provider and your CRM
  • Mapped to ISO/IEC 27001:2022 and NIST CSF 2.0
One engagement$[ ]

Full assessment, policy and branded binder. Live register and evidence library for 12 months.

RecommendedAnnual$[ ] / yr

Everything in One engagement, plus regulation watch, annual re-assessment and version history.

BackPay and continue
Need a quote or an invoice instead? Talk to us. MSP partners sign in through the partner portal.
Policy Fox

A policy written from how your business runs.

Five short steps. You can pause any time and pick up on another device.

  1. ✓Create account
  2. ✓Company profile
  3. ✓Your plan
  4. 4Invite contributors
  5. 5Start the assessment

Already have an account? Log in to the portal

DDelegation is by domain group, not question. Suggested groupings come from the profile; the Owner keeps anything unassigned. Skippable.

Who knows the answers?

Hand sections to the people who actually run them. They'll only see their part. You can change this later.

SectionsNameEmail
IT & systems
Access, endpoints, backup, logging, cloud… (11)
People & office
HR, physical, awareness, data handling… (6)
Governance & business
Risk, suppliers, incidents, continuity… (6)
Contributors answer only their sections. You review everything before the policy is generated.
Skip, I'll answer everythingSend invitations
Policy Fox

A policy written from how your business runs.

Five short steps. You can pause any time and pick up on another device.

  1. ✓Create account
  2. ✓Company profile
  3. ✓Your plan
  4. ✓Invite contributors
  5. 5Start the assessment

Already have an account? Log in to the portal

EWebsite research results shown before the first question: the product already knows something true about them. This is the last pre-interview screen; "Begin" opens the assessment.

You're set, Dana.

We read harborrealty.com while you were signing up. Here's what we'll use to tailor your questions.

✓ Six offices across New York and Connecticut
✓ About 100 licensed agents, mostly independent contractors
✓ Client portal and e-signature in use
✓ Invitations sent to Marcus and Priya
Anything wrong here? The first questions will let you correct it.
Begin the assessmentGo to my dashboard
Your sections: Governance & business (6 domains, about 40 minutes). Pause whenever you like.
Policy Fox Harbor Realty Group
SearchHelpDA
1Product header: Paper logo on Deep Forest, per the guide. Orange appears once, on the main action (Download binder).

Good evening, Dana.

Information Security Policy v1.2 · Last generated 2 Oct 2026 · Next annual review 14 Mar 2027

Download binder
2Attention strip: only items waiting on the Owner. Typed (regulation, past target, question). Empty state shows "Nothing needs your decision" plus the next review date.
Needs your decision · 3View all
  • RegulationNew York SHIELD Act breach-notification window changed. 2 clauses in Incident management and Supplier relationships are affected; a revision is ready.Review proposal
  • Past target2 findings in Access control and Logging are past their target date (owner: Marcus Lee).Open findings
  • QuestionWho approves new vendor access? Needed to finish the Supplier relationships standard.Answer
3Two scores, never blended. Each shows a trend and what it's based on, so the number reads as progress the customer's team made, not a grade.
Policy health
94/ 100
−4 since last month · one regulation change awaiting your decision
Based on 117 requirements: defined, confirmed, current against 6 applicable regulations, reviewed on time.
Control progress
58/ 100
+9 since last month · 3 findings treated, 5 evidence files added
Severity-weighted. 14 of 22 findings marked treated by your team, 11 with evidence attached.
4The 23-domain table is the core view. Sortable; filters by contributor and status. Clicking a domain opens that section of the policy with its findings.

Domains · 23

All contributorsAll statusesSort: needs attention
DomainAssigned toPolicy healthControl progressOpenStatus
GovernanceDana Andrews (you)100%60%2On track
Risk managementDana Andrews (you)100%50%2On track
Asset managementMarcus Lee · IT100%33%3On track
Access controlMarcus Lee · IT100%25%4Past target
CryptographyMarcus Lee · IT100%100%0On track
Physical securityPriya Shah · Office100%100%0On track
Operations securityMarcus Lee · IT100%50%2On track
CommunicationsMarcus Lee · IT100%100%0On track
System acquisitionDana Andrews (you)100%100%0On track
Supplier relationshipsDana Andrews (you)92%0%1Regulation change
Incident managementDana Andrews (you)85%0%2Regulation change
Business continuityDana Andrews (you)100%50%2On track
ComplianceDana Andrews (you)100%100%0On track
HR securityPriya Shah · Office100%67%1On track
Awareness & trainingPriya Shah · Office100%0%1On track
Backup & recoveryMarcus Lee · IT100%100%0On track
Logging & monitoringMarcus Lee · IT100%0%1Past target
Vulnerability managementMarcus Lee · IT100%50%1On track
Endpoint protectionMarcus Lee · IT100%100%0On track
Email securityMarcus Lee · IT100%100%0On track
Cloud applicationsMarcus Lee · IT100%100%0On track
Data handlingPriya Shah · Office100%0%1On track
Remote workPriya Shah · Office100%100%0On track
5Regulations summary links to the full page: each applicable regulation with jurisdiction, trigger, satisfying clauses, and status.
Applicable regulations · 6
NY SHIELD ActChange
FTC Safeguards RuleCurrent
NY DFS cyber (Part 500)Current
Gramm-Leach-BlileyCurrent
Insurer questionnaire 2026Current
PCI DSS (SAQ A)Current
See all regulations →
Upcoming
  • Finding target: MFA on VPN18 Oct
  • Finding target: Vendor review31 Oct
  • Quarterly check-in reminder1 Jan
  • Annual policy review14 Mar
Team
  • Marcus Lee · IT · 11 domainsActive
  • Priya Shah · Office · 6 domainsActive
  • Dana Andrews · Owner · 6 domainsYou
Manage team →
6Activity is separate from attention. Contributor progress and uploads live here so the strip stays meaningful.
Recent activity
  • Marcus attached evidence to "Endpoint encryption enforced"Today, 4:12 pm
  • Priya marked "Visitor log" as treatedYesterday
  • Policy v1.2 generated after your defaults review2 Oct
  • Marcus completed Vulnerability management30 Sep