Policies, with Policy 2.0

Show your policies are followed, not only approved.

Policy 2.0 breaks each policy into principles, each with an owner and the risks, controls and indicators that test it.

Shown on Halden, our fictitious Lloyd's managing agent. See how Halden runs it

Halden · Policy log

Do our policies hold together?

  • 12Policies
  • 34Principles
  • 1Review overdue
  • Delegated authority policy1 failed control · 2 overdue actionsReview overdue
  • Claims management policy3 of 5 controls effective1 failed control
  • Outsourcing and third-party policy1 overdue actionReview in 59 days
From Halden's policies report, at 30 September 2026.
Why now

Lloyd's says the Principles cannot be handed to compliance.

Our reading: a policy signed once a year by one owner says little about whether the business follows it.

What Lloyd's and the PRA said in 2026
  1. Jan 2026 · Lloyd'sBoards and senior management should not regard the Principles as "activities that can be delegated to compliance".Source: Lloyd's, Principles Board Attestation: Guidance for 2026, p3 (opens in a new tab)
  2. Apr 2026 · PRASenior individuals "remain accountable for the actions of those to whom they delegate responsibilities".Source: PRA SS35/15, April 2026 update, para 2.33 (opens in a new tab)
  3. Apr 2026 · PRAReasonable steps include "raising issues, reviewing issues, and following them up with relevant staff, committees and boards".Source: PRA SS35/15, April 2026 update, para 2.112 (opens in a new tab)

What you get

  • Break each policy into principles you can test.

    Each principle has its own owner, and links to the risks, controls and indicators that show whether it holds.

    Today
    One long document, signed once a year
    With CoVi Analytics
    Principles, each with an owner and tests
  • See a failed control on the policy it affects, as soon as it is recorded.

    Failed controls, incidents and overdue actions surface on the principles they touch, so the review starts from what actually happened.

    Today
    Signed off at the annual review
    With CoVi Analytics
    Failures show on the policy
    Halden's policy log in CoVi Analytics: 12 policies, 34 principles, 1 review overdue and 3 of 12 actions overdue. The delegated authority policy sorts first: review overdue, 1 failed control and 2 overdue actions.

    Halden's policies report sorts what needs attention first.

  • Know which policy wordings changed, and who approved each change.

    Each line shows the share of policies on its house wording unchanged, and every exception with its approver.

    Today
    Exceptions spotted at audit
    With CoVi Analytics
    Each exception counted, with its approver

Know each policy holds, and who owns the fix when it does not.

Each principle points to the controls, indicators and actions that test it, so the answer is already in the record.

Bring one policy. See it as principles.

Tell us which policy is hardest to evidence today, and leave knowing where to start.

Book a 20-minute demo

We'll walk you through how it all comes together with Halden.