Skip to content

For CFOs and finance directors

“Is every policy current and approved?”

The audit committee

Giraft keeps one register of your policies and a dated record for each: which version is in force, who approved it and when, when it is next reviewed, and who has acknowledged it.

Contact usHow it works ↓

Already use Giraft? Sign in

The answerExample data
Giraft.Anti-Fraud Policy

Policy record

Anti-Fraud Policy

Version 3ApprovedPublished
Download the record (PDF)
Approved
4 of 5 votes, by personal link
14 Oct 2026
Sealed
The approved text, unchanged since approvalsha256:9f4c2b…3d8a01
14 Oct 2026
Published
Staff policy pageShows staff the version in force
15 Oct 2026
Next review
October 2027Reminders before the date passes

Staff acknowledgement

38 of 41staff acknowledged

  • 38acknowledged
  • 2waiting
  • 1not asked yet
Asked
15 Oct 2026
New staff
Asked automatically

How it works

How the record gets made

The record isn’t put together when someone asks. Each step adds its own dated line as the work happens.

  1. 0129 Sep

    Draft

    Start a new draft, or bring in the Word document you already have.

  2. 022 Oct

    Comment

    Every comment lands beside the text. You decide what changes.

  3. 0314 Oct

    Approve

    Approvers vote from a link in their email.

  4. 0414 Oct

    Seal

    The approved words are sealed with the date.

  5. 0515 Oct

    Publish

    The version in force goes on your policy page.

  6. 06Open

    Acknowledge

    Staff are asked to acknowledge it, and people who join later are asked automatically.

Nothing is sent, approved or published until you say so.

From the same record

The other questions you’ll be asked

Each one is answered from the same register of policies.

  • “Is anything past its review date?”

    Not yet. The Treasury Policy is due in three weeks, and Giraft reminds you before a review date passes.

    Next review

    • Treasury PolicyReview due in 3 weeks
    • Expenses PolicyMar 2027
    • Anti-Fraud PolicyOct 2027

  • “Which version was in force at the year end?”

    Version 2. Every version is kept, with the dates it was approved and replaced.

    Versions

    • Version 3In force
    • Version 2Replaced 14 Oct 2026
    • Version 1Replaced 9 Sep 2025

  • “Who approved it, and when?”

    Four of five approvers, each from their own link, on 14 October. The approved words are sealed with the date.

    Approval

    • Votes for4 of 5
    • Approved14 Oct 2026
    • Sealed14 Oct 2026

  • “Who hasn’t acknowledged it yet?”

    Three of 41: two are waiting, and one hasn’t been asked yet. You see it person by person.

    Still to do

    • Maria KellyWaiting
    • Rónán DohertyWaiting
    • Úna BrennanNot asked yet

The law

Where a record helps

A record supports accountability. It doesn’t prove every duty was met.

  1. Directors' compliance statement

    Directors of every PLC, and of companies over the Act's size thresholds, must state that they are responsible for securing compliance with key company and tax law, and confirm that a compliance policy statement, arrangements and a yearly review are in place, or explain why not.

    Companies Act 2014, s.225

    Oversight, and what can follow

    The Corporate Enforcement Authority. Failing to comply is an offence by each director in default, and the Authority can serve a notice to put it right (s.873).

    What Giraft can show

    The compliance policy statement in force, who approved each version and when, and the date of each review.

  2. Corruption

    A company can be guilty when its directors, staff or agents commit corruption to win or keep business for it, unless it proves it took all reasonable steps and exercised all due diligence to prevent it.

    Criminal Justice (Corruption Offences) Act 2018, s.18

    Oversight, and what can follow

    The Garda National Economic Crime Bureau investigates, and the DPP decides whether to prosecute. Officers can be prosecuted themselves (s.18(3)).

    What Giraft can show

    Which policy was in force on a given date, who approved it and which staff acknowledged it: support for the defence, not proof of it.

  3. Anti-money laundering

    Regulated firms, such as banks, accountants, tax advisers and some legal and property businesses, must adopt policies approved by senior management, keep them under review, and instruct staff on the law.

    Criminal Justice (Money Laundering and Terrorist Financing) Act 2010, s.54

    Oversight, and what can follow

    The firm's supervisor, such as the Central Bank, a professional body or the Department of Justice, can issue directions, and a breach is an offence.

    What Giraft can show

    Senior management's approval of each version, its review dates, and which staff acknowledged it.

  4. Each director's duty

    Each director must ensure that the company complies with the Companies Act.

    Companies Act 2014, s.223(1)

    Oversight, and what can follow

    Through the specific duty breached: the Corporate Enforcement Authority, or the DPP.

    What Giraft can show

    Which policies the board approved, when, and when each was last reviewed.

A summary of the law, not legal advice.

Questions

  1. 01

    Does the record make us compliant?

    No record can. It shows what was done and when: which version was approved, by how many votes, and who acknowledged it. Meeting each duty stays with your organisation.

  2. 02

    What does the seal show?

    That the approved text hasn’t changed since it was approved. Giraft keeps a sha256 fingerprint of the approved words, with the date.

  3. 03

    Do approvers need an account?

    No. Each approver votes from a personal link in their email: no account, no password.

  4. 04

    Where is our data stored?

    In Ireland. Every provider that handles it is named in our Data Processing Agreement, at giraft.ai/legal/dpa.

Have the answer ready before the question.

We’ll walk you through Giraft with your own policies, and show you the record it keeps.

Contact us