Policy attestations

Attestations collect a "read and understood" confirmation on a policy document from every person who must follow it. An admin creates a campaign against one controlled document, launches it to all members or one department, and watches the completion bar fill as people attest. The page is at /attestations, under Attestations in the side nav.

Before you start

• The Attestations module must be enabled. It is on by default. If Attestations is missing from the side nav, an admin can turn it on in Settings > Modules (Governance, risk and compliance group).
• You need an Admin or Owner role to create, edit, launch, or close campaigns. The New Campaign button and the campaign action buttons are hidden for other members.
• Any member can attest to campaigns that target them, from the My Attestations tab.
• The policy must already exist in Documents. A campaign is always tied to one document.
• If you want to target a department, the department and its members must be set up first (see Departments).

The page has two tabs: Campaigns (the register, with a completion bar per campaign) and My Attestations (what is waiting for you).

Create a campaign

1. Open Attestations in the side nav.
2. Click New Campaign (admins only).
3. Fill Title (required), for example "Information Security Policy 2026".
4. Optionally fill Description with context for the audience.
5. Pick the Document: the controlled policy people must read. Required.
6. Pick the Audience: All members or Department. If you pick Department, a Department select appears and is required.
7. Optionally pick a due date with the Due date (optional) button.
8. Pick a Recurrence: One-off, Annual, Semi-annual, or Quarterly. This records the cadence and shows as a tag on the campaign. CompStack does not launch repeat rounds automatically; create and launch a new campaign each period.
9. Click Create campaign.

The campaign is created in status Draft. Draft campaigns can still be edited (pencil icon). Once launched they can no longer be edited.

Launch a campaign

1. On a Draft campaign card, click Launch.
2. CompStack sets the campaign to Active and, in one step:
   • creates one pending attestation row for every person in the audience,
   • sends each newly targeted person an in-app notification titled "Attestation required: ",
   • raises one org-level task "Attestation campaign: " in the Task Center so the campaign itself is tracked to closure.
3. You see a confirmation like "Campaign launched, 12 people notified".

The completion bar on the card starts at "0/12 attested". Before launch it reads "Not launched yet".

People who join the organization after launch are not added automatically.

Attest to a policy (any member)

1. Open Attestations and switch to the My Attestations tab. Campaigns that target you and are still pending appear here. You are also pointed here by the in-app notification.
2. Click the Read: tag to open the policy document and read it.
3. Back on the tab, click I have read and understood.
4. Your attestation is recorded with a timestamp and the item leaves your list.

If nothing targets you, the tab shows "Nothing awaiting your attestation".

Track and close a campaign

1. On any campaign card, click Responses to open the per-user list. It shows "X/Y attested" and each person with either a green "Attested " tag or a gray "Pending" tag.
2. The completion bar on the card updates as people attest. It turns green when everyone has attested.
3. If the campaign has a due date and the date passes while the campaign is Active, the due tag turns red.
4. When you are done collecting, click Close (available on Active campaigns, admins only). The status becomes Closed. Closed campaigns cannot be launched again.

Campaign statuses are: Draft, Active, Closed.

Try it

• As an admin, click New Campaign, fill a title, and try to save without picking a document. Expected: nothing happens; the Document field is required.
• Create a campaign against a policy document with Audience "All members" and a due date next month. Expected: the campaign appears in the Campaigns tab with a gray Draft tag and "Not launched yet" under the bar.
• Click the pencil icon on the Draft campaign, change the title, click Save. Expected: the card updates.
• Click Launch. Expected: a message like "Campaign launched, N people notified", the tag turns to a green Active, and the bar shows "0/N attested".
• Check the Task Center. Expected: a task "Attestation campaign: