Managing Documents
Documents helps teams start faster with useful drafts, then keep approved versions, acknowledgements, review cadence, and history organized.

Organization
Documents
Create, edit, approve, and review policies, notices, procedures, and plans.
| Document | Purpose | Status |
|---|---|---|
Access Control Policy Defines how access is requested, approved, reviewed, and removed. | Policy | Approved |
Access & Authentication Policy Defines account, password, MFA, and sign-in expectations. | Policy | Approved |
Security Incident Response Procedure Provides first steps for reporting and assessing incidents. | SOP | Draft |
1. Start from a useful draft, not a blank page
The Add document flow includes core HIPAAList starters and Area-specific document templates. Starters are intended to be usable working drafts, not blank outlines.
Documents can also be added from scratch when the organization already has its own policy, notice, SOP, plan, or assessment. Either way, the record stays connected to approvals, acknowledgements, reviews, and export.
2. Approval creates the version staff can rely on
Saving a draft does not replace the approved version. Approval records who approved the exact version and when.
Approved documents can require staff acknowledgement and can be reviewed later without creating a new draft version.