Policy & procedure management for regulated industries
Audit-ready policies, without the spreadsheet.
Compliance teams lose weeks matching policies to regulators' circulars by hand. Blueprint+ ties every policy clause to the rule it meets, turns procedures into flows staff can follow, runs the approvals and keeps the evidence, so the next audit is a walkthrough rather than a scramble.
1.1 · Nature and purpose
Introduction
- The purpose of this Policy is to establish rules for the Doc Business Function in alignment with applicable laws.
- The Bank is a Shari'a compliant organisation governed by CBUAE AML Circular 2023Reg · §4.1Reg · §7.2 and read with Ctrl KYC-001.
- This policy applies to all customer-facing activities on behalf of the Bank.
- CBUAE AML Circular 2023 — Clause 4.1Central Bank UAEReg
- CBUAE AML Circular 2023 — Clause 5.3Central Bank UAEReg
- CBUAE AML Circular 2023 — Clause 7.2Central Bank UAEReg
- FATF Recommendation 10 — CDDFATFReg
Requires regulated institutions to apply risk-based AML controls and report suspicious activity to the FIU without delay.
Where the shared drive breaks down.
Policies live in Word. The regulatory mapping lives in a spreadsheet. Procedures live in slide decks nobody opens. Approvals live in email. Blueprint+ puts all of it in one place, so the document itself carries the proof.
The first draft already cites the rule
Tell the Document Assistant what a section must cover. It drafts clause text that already cites the right circular, matches your house style, and drops into the document with its links attached.
- Drafts cite the specific regulatory clause
- Contradictions with existing policies are flagged as you write
- Three editors in one document, no version emails
4.1 Customer Due Diligence
See which rule every clause satisfies, and which clauses satisfy none
Select a sentence and link it to a clause in the register. Reviewers and auditors see the link inline, and the Consistency Check tells you what is still uncovered before anyone outside the team does.
- Regulatory, control, risk and cross-document links
- Registers for India and the GCC, kept current
- Coverage and gaps reported per document and per regulator
Approvals that run themselves and keep the trail
Set the stages your governance structure needs: co-creation, review, approval, board. Blueprint+ routes the document, chases the deadlines, records every decision and locks the version on publish.
- Role-based actions at each stage
- Due dates, overdue flags, reminders
- Full version history and side-by-side compare
Procedures staff can follow, drawn as flows and shown on screen
Draw the procedure as a flow in the SOP designer, with roles, decisions and hand-offs. Attach a screen recording to the step it belongs to, and close with a short assessment. Staff see the action; you can prove they understood it.
- Flowchart SOP designer with swim-lane roles and decision points
- Screen-capture videos embedded in the exact step
- MCQ assessments with completion and comprehension tracking
See how Blueprint+ saves your team hours every week.
A two-minute tour of the policy lifecycle, from the first draft to the last acknowledgement. Then shorter clips on each feature.
2:10
More short videos
1:24Linking a clause to its regulationSelect, link, verify, and see coverage per regulator
0:58Drafting with the Magpie AI co-pilotFrom prompt to inserted clause with links attached
1:41Review, approval and board sign-offConfigurable stages, deadlines and the audit trail
1:12Drawing a procedure in the SOP designerRoles, decisions, hand-offs and embedded recordings
0:49Acknowledgement trackingWho has read and signed, who has not, at a glance
1:33Running a risk and control self-assessmentChecklist, scoring, threaded review, PDF report
Start with policies and procedures. The rest of the GRC lifecycle is already underneath.
Blueprint+ launches as a policy and procedure platform, built on registers, workflow automation and reporting that already support the wider governance, risk and compliance lifecycle. Extend into them as your needs grow, without migrating anything.
Policies
Regulatory-linked documents with AI drafting, versioning, acknowledgement tracking and audit trail.
Procedures
SOP designer for drawing flows, with embedded video walkthroughs and MCQ assessments.
Risk and control registers
Catalogue risks, map controls against them, trace impact across linked items.
Regulations library
Applicable requirements, linked at clause level to the documents that satisfy them.
Risk and control self-assessment
Checklists, risk scoring, threaded review and generated PDF reports.
Workflow and form builder
No-code process design with access control per step, escalations and a test runner.
Reporting and dashboards
Configurable widgets, a report designer and execution history across every process.
Learning hub
Courses assembled from published policies, procedures and risk-control pairs, so training stays in sync.
For the people who get the call when the auditor arrives.
Hand clients a working framework, not a folder of Word files
Configure the governance structure and pre-link the regulatory register for a client, then hand over an environment that works on day one. Your framework stays visible and in use long after the engagement ends.
- Reuse one regulatory register across engagements
- Show auditors live readiness instead of a binder
- Handover in hours, not weeks
Know what is due, what is covered and what is not, before anyone asks
One system where every document is tied to its regulatory basis, every revision is logged and every approval is tracked. The answer to "show me" is a click, not a week.
- See what is due for review, and by whom
- Find regulatory gaps before the audit does
- Prove staff read and understood each procedure
Everything the policy and procedure lifecycle needs, in one system of record.
From the first draft to the last acknowledgement, with the governance registers, workflow engine and reporting underneath it.
Policy and procedure management
- Document registry with version, status and owner on every item
- "Published to me": each person's own list of what to read and sign
- Lifecycle tracking: Draft, Under review, Approved, Published, Archived
- Acknowledgement tracking: who has read and signed, who has not
- Version history and a dedicated read-only policy viewer
Authoring and review
- Rich document editor with regulatory, control and risk linkage
- Magpie AI co-pilot inside drafting, workflow and form setup
- Co-creator invitations, structured review and approval screens
- Optional board-approval tier for documents that need it
- Publish step that starts acknowledgement tracking automatically
Procedures and SOPs
- SOP designer for drawing procedures with roles, decisions and hand-offs
- Video walkthroughs embedded in the step they belong to
- MCQ assessments with completion and comprehension tracking
- Procedures follow the same review, approval and publish chain
- Execution history for every run of a tracked process
Governance registers
- Risk register and control registry, mapped to each other
- Regulations library with clause-level linkage to documents
- Impact Analyzer: see what else a change affects before you make it
- Risk and control self-assessments with scoring, threaded comments and PDF reports
Organisation and discovery
- Hierarchical tagging and admin-managed tag pools
- Global search across documents and registers
- Linked items keep related policies, risks and controls together
- Library view across the wider content collection
Workflow, reporting and administration
- No-code workflow builder with escalation matrix and test runner
- Form builder and role-specific task inboxes
- Configurable dashboards, widget builder and report designer
- Branding presets, platform settings and role-based access
Included regulatory frameworks
- RBIReserve Bank of India
- SEBISecurities and Exchange Board of India
- IRDAIInsurance Regulatory and Development Authority
- CBUAECentral Bank of the UAE
- DFSADubai Financial Services Authority
- ADGMAbu Dhabi Global Market
- FATFFinancial Action Task Force
- SAMASaudi Central Bank
- CBBCentral Bank of Bahrain
- QFCRAQatar Financial Centre Regulatory Authority
- RBIReserve Bank of India
- SEBISecurities and Exchange Board of India
- IRDAIInsurance Regulatory and Development Authority
- CBUAECentral Bank of the UAE
- DFSADubai Financial Services Authority
- ADGMAbu Dhabi Global Market
- FATFFinancial Action Task Force
- SAMASaudi Central Bank
- CBBCentral Bank of Bahrain
- QFCRAQatar Financial Centre Regulatory Authority