Each VerdoCo series contains two phases. Phase 1 (Foundation Suite) delivers the governance and policy infrastructure — the written program policy, asset and system inventory, gap analysis, risk assessment or matrix, and supplemental reference documents. Phase 2 (Operational Suite) delivers the operational and ongoing management infrastructure — action trackers, vendor management tools, incident response plans, training matrices, monitoring checklists, and the annual compliance review report. An Administrative Protocol Suite contains both phases together. Every document is delivered in both editable .docx format and locked .pdf format.

They are substantially pre-written documents — not blank templates. The regulatory policy language, statutory references, control descriptions, and document structure are already authored. What requires your input are the organization-specific editable fields: your responsible officer names, asset entries, gap analysis status values, risk ratings, dates, and remediation action assignments. These editable fields are clearly marked in teal throughout every document. You complete the fields; you do not write the documents.

Every VerdoCo document is derived exclusively from official U.S. government primary sources — the Code of Federal Regulations (CFR), NIST Special Publications, DOJ final rules, SEC amendments, FTC rulemaking, and HHS/OCR regulatory guidance. Every document section includes a silver italic statutory reference line citing the specific CFR part, NIST control, or statutory section from which the content is derived. You can verify every section against the authoritative primary source directly.

VerdoCo monitors material regulatory changes across all covered frameworks. When a significant update occurs — a new NIST publication, an FTC rulemaking, a state privacy law amendment, a DOJ final rule — updated documents are released. Existing licensees are notified. You should also have your legal team confirm regulatory currency at the time of document completion and certification, as regulations can change between purchase and certification. Your legal team's review and certification role is specifically designed to catch any such changes.

Yes — the phases are designed to be implemented in sequence. Phase 1 establishes the foundational governance infrastructure that Phase 2 operates within. For example, the Phase 2 monitoring checklist references the gap analysis completed in Phase 1, and the Phase 2 annual report references the risk assessment from Phase 1. You can purchase Phase 2 independently, but full implementation requires Phase 1 to be completed first. For most organizations, purchasing the Administrative Protocol Suite (both phases together) is the most efficient approach.

A single-entity license permits one legal organization — the organization named in the purchase — to use the documents for its own internal compliance program. You may complete the editable fields, have the documents reviewed and certified by your legal team, present the completed documents to regulators, auditors, and examiners, and retain the documents as your official compliance record. You may not redistribute, resell, share, sublicense, or use the documents on behalf of any other organization.

Not under a single-entity license. Each client organization requires its own separate license. However, VerdoCo offers a multi-entity licensing track specifically designed for law firms, compliance consulting practices, and HR advisers who build compliance programs for multiple clients. Contact us at hello@verdoco.com to discuss multi-entity licensing terms and volume pricing.

Yes. Presenting your completed, certified VerdoCo documents to regulators, examiners, auditors, or legal counsel is expressly permitted and is the intended purpose of the documents. What is prohibited is distributing the documents to other organizations for their use as compliance infrastructure.

Every VerdoCo document is delivered with a unique canary reference code assigned to your specific transaction. This code appears on the cover page and in the footer of every document. If an unauthorized copy of a VerdoCo document is discovered — whether shared online, used by another organization, or distributed without authorization — the canary code allows VerdoCo to trace the document to the exact transaction it originated from with certainty. The EULA carries $25,000 in liquidated damages per document per unauthorized instance. The canary system is the enforcement mechanism that makes this credible.

Delivery is immediate. Within minutes of your order being confirmed, your personalized .docx and .pdf files are generated — with your organization's details injected, documents locked, and a secure download link delivered to your confirmation page and email. There is no manual processing, no waiting for a team member to send files, and no queue. If you experience any delay beyond 15 minutes, contact support at hello@verdoco.com.

Download links are active for 60 days from the date of purchase. You may download your files up to 5 times within that window. After 60 days, the links expire for security purposes. If you need access to your files after the link expires, contact support with your order information and we will assist you.

The PDF version is intentionally flattened and locked — editing and content-copying are disabled. The PDF is your official, immutable compliance record for presentation to regulators, examiners, and legal counsel. You complete the document in the editable .docx format, then export a final PDF from Word once all fields are completed and legal has certified the document. The original locked PDF is your reference copy showing the document's authentic structure and your forensic identification information.

No — and this is an important distinction. Compliance is an organizational outcome determined by the accuracy and completeness of your implementation, the currency of applicable regulations at the time of use, and the informed judgment of your legal and compliance teams. VerdoCo provides the administrative documentation infrastructure. Your organization provides the operational truth by completing the editable fields accurately. Your legal counsel certifies the completed result. That three-part sequence produces a compliant documentation record. No documentation platform — including VerdoCo — can guarantee regulatory compliance as an outcome.

No. VerdoCo is a compliance documentation platform — not a law firm, compliance auditor, or professional consulting agency. Purchasing VerdoCo documents does not create an attorney-client relationship, a compliance advisory relationship, or any professional-client relationship of any kind. The documents do not constitute legal advice. All regulatory interpretation, implementation decisions, and ultimate legal liability remain exclusively with the purchasing organization and its legal counsel.

VerdoCo monitors regulatory changes and releases updated documents when material changes occur. However, your legal team's certification step specifically includes confirming that the document reflects current regulatory requirements at the time of certification. If a regulation changes after you purchase but before you complete and certify, your legal team should flag the discrepancy. Contact VerdoCo if you believe a material regulatory change has occurred that affects your purchased series and we will advise on next steps.

Microsoft Word (any version from 2016 onward) is strongly recommended for editing the .docx files. Word correctly renders document protection, teal field formatting, and the visual grammar of editable versus locked content. Google Docs can open .docx files but may not preserve all formatting and document protection features correctly. LibreOffice Writer is an acceptable alternative. Do not complete VerdoCo documents in Google Docs if you plan to present them as official compliance records.

No. Your identity fields — name, organization, email, transaction ID, and canary code — are locked into the document at the time of generation and may not be altered or removed. This is a contractual prohibition under the EULA and a technical enforcement mechanism. Attempting to remove or alter these fields constitutes a breach of the license agreement and may trigger the liquidated damages provisions.

Pricing is per organization — one purchase covers one legal entity's use of the purchased series. There are no per-user or per-seat fees. Multiple employees within the purchasing organization may participate in completing the documents, but the license is tied to the organization, not to individuals.

Because VerdoCo documents are personalized digital products delivered instantly with your organization's identity injected into every file, refunds are not available once the document generation process has completed. If you experience a technical issue with delivery — documents not received, incorrect personalization, or file access problems — contact support immediately and we will resolve it. Review the full refund and licensing policy before purchase.

Yes. Volume pricing is available for organizations purchasing multiple series, and institutional licensing is available for law firms, consulting practices, and enterprises with multi-entity compliance needs. Contact us at hello@verdoco.com with your requirements and we will provide a custom pricing proposal.