# Compliance & Policies The single place to manage and enforce every policy across your organization. Policies build on the organizational context you already have and keep learning from every new conversation and change. ## Compliance & Policies The single place to manage and enforce every policy across your organization. Policies build on the organizational context you already have and keep learning from every new conversation and change. ## How Compliance & Policies helps your teams Employee lifecycle policies: define how onboarding, offboarding, and role changes run by role, department, and location, so people are set up and wound down automatically and HR and IT handle only the exceptions Privileged access management: define who qualifies for elevated access and under what conditions, from time limits to peer review to executive sign-off, so access is granted the moment it’s justified Asset purchase and refresh: define a single purchase policy for every scenario, from new hire to upgrade to replacement to refresh, with eligibility that adapts by role, location, and budget, so employees get a complete self-serve experience Vendor and contractor access: define scoped, time-bound access that expires on its own, with eligibility tied to engagement type and duration Travel and expense pre-approval: define spending limits, approval paths, and exceptions up front, so employees get an instant answer and finance steps in when it falls outside policy ## Define policy once, enforce it everywhere ### Define Once Define once, enforce everywhere: set each policy a single time instead of maintaining it in a dozen places ### Less Manual Work Less manual work: policies are detected and drafted automatically from what your organization already does ### Audit Ready Always audit-ready: know exactly which policy applied, to whom, and when ### Early Warnings Problems caught early: get alerted when policies leak, fail, or fall short, before they become a risk ## Powerful capabilities built for enterprise IT - One place to manage every policy: every policy across IT, HR, finance, and security lives in one governed space instead of scattered documents, emails, and team knowledge - Effortless creation and editing: build a policy from scratch, upload an existing document, or adjust a live policy in minutes, with changes taking effect everywhere instantly - Continuous policy learning: reads your knowledge base, documents, and day-to-day requests to understand the policies already operating across your organization - Governance and audit: every policy carries a named owner, approval chain, and full version history ## Learn and enforce policies from the systems you already run on - **HRIS: **HiBob, BambooHR, Workday, UKG Pro, SAP SuccessFactors, Sage HR, Rippling, Ceridian Dayforce, Namely - **Documentation: **Confluence, Notion, Microsoft SharePoint, email, Google Drive - **Service desks: **Freshservice, ServiceNow - **Employee platforms: **Workvivo, Simpplr - **Manual upload: **PDFs, internal docs, and any file format ## FAQ ### What does Harmony's Compliance & Policies layer control? Harmony's Compliance & Policies layer is where all of your organizational policies live, giving IT admins a single view of eligibility across every domain: employee lifecycle, privileged access, travel and expense, vendor access, and asset purchase. Every policy carries a named owner, approval chain, and full version history, and builds on the organizational context you already have. ### We already have policies written down. Why do we need this? Most organizations do. The challenge isn’t writing policies -it’s keeping them consistent. Compliance & Policies gives every policy a single source of truth that’s enforced everywhere, preventing drift. It also compares your documented policies with what’s actually happening, flags gaps and outdated rules, and recommends the changes needed to keep them aligned. ### Do we have to build every policy from scratch? No. Policies are detected and drafted automatically from what your organization already does. The system reads your knowledge base, documents, and day-to-day requests to surface the policies already operating, including the ones nobody ever formally wrote down. ### What kinds of policies can we manage? Anything that governs who gets what and under what conditions, across multiple domains, from IT, HR, finance, and procurement to legal and beyond. Common examples include employee lifecycle policies covering onboarding, offboarding, and role changes; privileged access management; travel and expense pre-approval; scoped, time-bound vendor and contractor access; and asset purchase and refresh from new hire to replacement. The same structure works for any policy your organization runs on. ### How does this help my team day to day? Employees get instant answers on what they're eligible for, and when something does need a person, the AI sends it to the right team the first time, adjusting the path as roles, thresholds, and ownership change. Your team is pulled in only for the genuine exceptions: onboarding runs automatically, access expires on its own, and purchase requests route themselves, so IT, HR, and finance spend their time on the cases that actually need a human. ### Will this help us with audits? Yes. Every policy carries a named owner, an approval chain, and a full version history. When an auditor asks which policy applied, to whom, and when, you have a precise answer rather than a search through old documents and email threads. ### Does it work with the systems we already use? Yes. Policies are learned from and enforced across your existing stack: HRIS platforms like Workday, UKG Pro, SAP SuccessFactors, and HiBob; documentation in Confluence, Notion, SharePoint, and Google Drive; Service desks: Freshservice, ServiceNow; and employee platforms like Workvivo and Simpplr. You can also upload PDFs and internal documents directly.