PolicyPress turns Markdown policies into a branded site and versioned PDFs - built for small and mid-size orgs that need auditor-friendly compliance without heavyweight GRC tooling.
PolicyPress is a static site generator for security policies - Git-native, PDF-first, and built for compliance without the overhead.
Write policies as Markdown files. Version history, PR reviews, and branch protection come free from your existing GitHub workflow.
Authoring GuideEvery policy gets a PDF named by title and version, auto-generated on every build - ready to hand to auditors without manual export steps.
PDF GuideMark content as draft to watermark it, or wrap sensitive notes in redact blocks so internal text never appears in published output.
See it in actionTag policies with compliance framework controls. PolicyPress generates coverage reports automatically - no spreadsheet maintenance required.
View ReportsDeploy your own policy site or explore what PolicyPress can do
Learn how to author policies, generate PDFs, and configure compliance mappings.
Open GuidesStay informed about the latest policy changes and security updates
PolicyPress 1.6 adds an opt-in machine-readable audit bundle with SHA-256 hashes, real versioned compliance-report PDFs, a self-service Assurance page, TeX math in policy PDFs, and Markdown image alt text carried into tagged PDFs.
PolicyPress 1.5 adds opt-in tagged PDF/UA-1 output, a WCAG 2.1 AA-clean site, an overdue-review pre-flight check, configurable document classification, and visible policy owners.
PolicyPress 1.2 is out with a fully working GitHub Actions workflow, improved PDF generation, compliance report filtering, and a new marketing homepage layout.
PolicyPress