Policy attestation
Also known as: Policy acknowledgement, read and sign
Policy attestation is when employees confirm that they have read and understood a company policy, such as a code of conduct, an IT use policy, or a safety procedure, and that confirmation is recorded with the date and the policy version. It gives you proof that people were informed of the rules, which matters in audits, investigations, and disputes.
What gets attested
Common examples are the code of conduct, anti-bribery and conflict of interest policies, data protection and IT acceptable use policies, health and safety procedures, and whistleblowing rules.
Each attestation should be tied to a specific version, so when a policy changes, people confirm the new version.
Why a record matters
If something goes wrong, the first question is often whether the person knew the rule. A dated attestation tied to a policy version answers it. Without one, you only have an email that may or may not have been read.
Regulators and auditors also expect to see that key policies reach every relevant employee.
Read the training audit trail definition
Running attestations in an LMS
An LMS can send the policy to the right people, require them to open it and confirm, optionally check understanding with a few questions, and remind anyone who has not responded. When a new version is published, it can ask everyone to attest again.
Attestation records then sit next to training records, so one report shows both.
See Coursy for compliance training
Frequently asked questions
What is policy attestation?
Employees confirming that they have read and understood a policy, recorded with the date and the policy version.
What is the difference between attestation and training?
Attestation confirms that someone read and accepted a policy. Training teaches the knowledge or skill. Many companies combine them, with a short course followed by an attestation.
How often should employees attest to policies?
When they join, whenever a policy changes, and often once a year for key policies such as the code of conduct.
Is a policy attestation legally binding?
It is evidence that the employee was informed of the policy. How much weight it carries depends on local law and the context, so check with your legal team.
Can an LMS track policy acknowledgements?
Yes. It can distribute the policy, record each confirmation with date and version, remind non-responders, and request new attestations when the policy changes.