Policy awaiting sign-off
Vendor Data Processing Policy v3.1
AI-drafted · Legal reviewed
Approver: J. Harmon, VP Compliance
Approval chain
Legal — approved
Risk — approved
?
VP Compliance — oral check requiredSign-off gated — approver must complete oral verification before policy goes live.
Approver oral check — voice only
SM
Question 1 — start recording
"Section 4.2 limits vendor retention to 90 days. Walk me through the reasoning — what risk does a longer window create?"
Transcription — AI question
J. Harmon speaking● recording
"I believe it's a GDPR requirement... some kind of regulatory thing?"
Live transcription — approver response
SM
Question 2 — start recording
"Which article specifically — and how does it interact with the indemnification clause in Section 7?"
Transcription — adaptive follow-up
Verification score — emerging
Policy understanding42
Trade-off awareness28
Sign-off blocked — approver cannot verbally reason through key controls