This page provides an overview of PolicyPro and links to user guide.
What is PolicyPro?
PolicyPro is Exostar’s compliance automation tool that helps organizations build, maintain, and document security policies across all 14 CMMC domains. Rather than writing policies from scratch, users answer a structured questionnaire and Policy Pro uses those responses to automatically generate complete, audit-ready policy documents.
PolicyPro is built on a question-and-answer model. Each CMMC domain contains a set of questions about how your organization operates. Your answers become the factual foundation of every policy document generated, ensuring the output is specific to your organization and defensible in a compliance review.
Key Features
| Questionnaire Management | Answer questions for each of the 14 CMMC domains through the chat interface or via Import. |
| Progress Tracking | See completion status for every domain on the Main Screen with visual progress bars. |
| Policy Generation | Generate complete policy documents automatically from your answers. |
| Export | Download your questions and current answers as a CSV file for offline use or sharing. |
| Import | Upload a completed CSV file to bulk-update answers for one domain or across all domains. |
| Selective Import | Review every proposed change before applying, and choose exactly which answers to update. |
How does PolicyPro work?
PolicyPro offers two methods for providing answers to the questions.
- Chat Interface: You are working through a policy interactively and want to answer questions one at a time with AI-guided prompts on the Policy Screen.
- Import: You need to collect answers offline, collaborate with subject matter experts who are not Policy Pro users, or update many answers at once.
PolicyPro User Guide
To learn more about PolicyPro and navigating the application, click the link to view the PolicyPro User Guide
Transition New PolicyPro Platform
As part of our transition to a new PolicyPro platform, please ensure you download your current policies from the legacy site before your original expiration date. After this date, access to the old platform will no longer be available.
View this page to learn how to download your current policies.