PolicyDiff

PolicyDiff is a web app (with optional desktop agent) for security and compliance teams to manage security policies, standards, and architecture decisions like code—without forcing everyone into Git. It creates a canonical policy library, tracks every edit with human-readable diffs, and ties changes to approvals, tickets, and evidence. The app generates audit-ready change logs and maps each policy section to common control frameworks (SOC 2, ISO 27001, NIST 800-53) so you can show impact when a requirement changes. A lightweight AI assistant can summarize changes, flag missing sections, and suggest control mappings, but the system is designed so you can operate without AI if needed. The goal is simple: stop losing time arguing about “what version was in effect” and produce defensible, timestamped proof for auditors and internal risk reviews.