Most templates for a compliance policy stop at the acknowledgment form: a signature line stating an employee received the policy, with no field naming which version. The Department of Justice's Evaluation of Corporate Compliance Programs asks a harder question, whether the program is disseminated to, and understood by, employees in practice, not whether a signed form exists somewhere in a file. A generic acknowledgment form's own boilerplate usually answers the wrong way, stating one signature covers every future revision regardless of whether the employee ever saw the revised text.
This pack ties every attestation to the version it was actually given for. The Attestation Tracker records each employee's acknowledgment against the Policy Register's current version, so reissuing a policy stales every existing row for that policy rather than leaving one old signature to stand for whatever text replaces it. A second, independent clock runs alongside it on the Review Calendar: a jurisdiction that mandates retraining on a fixed interval keeps requiring it on that schedule even in a year the underlying policy text never changes at all.
Applied to Thornwell Retail Group, Inc., a 64-employee retailer across nine locations in six states: the Anti-Harassment and Non-Retaliation Policy moves from v2 to v3 on January 12, 2026, inside the company's own 30-day re-attestation window. By the window's close, 58 of 64 employees have attested to v3; four are still on v2 and now overdue; two are new hires not yet due under their own onboarding grace period. The predecessor spreadsheet had one yes-or-no column and had shown 100% straight through the reissue, since it never recorded which version anyone actually signed.
Compliance Policy and Attestation Template