Why Review Policies
Review policies define when and how often content should be reviewed, and who receives reminders. Once you create a policy, you can assign it to documents or risk assessments so they're regularly checked for accuracy and currency. This keeps content up to date, supports regulatory compliance, and creates an audit trail. You'll need the review interval, the people or groups who should review, and a clear name that describes what the policy is for.
How to Create a Review Policy
Go to Settings > Governance and select the Review Policies tab
Click New Review Policy or Create Policy
Enter a Name (e.g. "Annual Policy Review" or "Quarterly Risk Assessment Review")
Include the interval in the name so it's clear how often reviews occur
(Optional) Add a Description explaining when to use this policy and what content it's for
Set the Review interval—how often content should be reviewed (e.g. 3 months, 6 months, 1 year, 2 years)
Match the interval to regulatory requirements (e.g. annual for H&S policies)
Add Recipients—who receives review reminders:
Click Add Users to add individuals
Click Add Groups to add teams or groups (use groups for flexibility when people are unavailable)
You can add both individuals and groups
(Optional) If your site has child sites, toggle Share with child sites so they can use this policy—they can't edit or delete it
Click Save or Create Policy
Your new review policy appears in the list and is ready to assign to content.
Before You Start
You need the Manager or Admin role for your site to create review policies. If you don't see the governance settings, contact your site administrator.
Common Questions
What happens when I change a policy's interval? CalmCompliance recalculates the next review due dates for all content using that policy.
Can I assign multiple review policies to one document? No. Each document or assessment can have one active review policy. If you need different frequencies, consider splitting into multiple documents.
What if I delete a group that's used in a review policy? The policy continues but won't have recipients from that group. Update the policy to add new recipients.
What happens if no one completes a review? The content stays published but is marked overdue. Notifications continue until the review is completed.
