v0.1.0 - 22 SOC 2 policy templates and the CLI

First public release of the Policyseed CLI and policy templates.

What is in here

• 22 SOC 2 governance policy templates (about 39,000 words), written to be adopted by a 10 to 50 person software company, not to sit in a folder.
• A deterministic renderer: answer 23 questions in intake.yaml and every policy comes out naming your actual identity provider, cloud, source control, MDM, password manager, logging and backup tooling. Conditional blocks drop the sections that do not apply to you.
• A CLI with no runtime dependencies:

npx github:odedmoshe/policyseed init    # writes intake.yaml
npx github:odedmoshe/policyseed build   # writes policies/01..22-*.md
npx github:odedmoshe/policyseed check   # exits non-zero when a policy review is overdue

• A GitHub Action example that fails CI when a policy's review date has passed, so policy review becomes a build failure instead of a calendar reminder nobody sees.

Scope and honesty

These are governance policy templates. They are not legal advice, they are not a compliance certification, and adopting them does not make a company SOC 2 compliant: management adopts the policies and an independent CPA firm performs the examination. Read every statement before you approve it; the documents describe how your company operates and they must be true.

Hosted version

https://policyseed.vercel.app renders the same 22 policies in the browser with no signup and nothing uploaded. The optional paid Audit Kit there adds AI tailoring, Word documents, a Trust Services Criteria crosswalk, an evidence checklist, acknowledgment forms and a review calendar.

Licence: Apache-2.0.