PliOS Resources

Policy template library

21 examiner-ready policy frameworks written in real regulatory language — browse section outlines free, then customize for your institution in PliOS.

Anti-Money Laundering

BSA/AML Compliance Program

Comprehensive Bank Secrecy Act / Anti-Money Laundering program covering all required pillars.

View outline

Suspicious Activity Reporting (SAR) Policy

SAR triage, decision matrix, narrative standards, and the tipping-off prohibition aligned to FinCEN guidance.

View outline

BSA/AML Risk Assessment Policy

Methodology for measuring inherent risk, control effectiveness, and residual risk across customers, products, geographies, and channels.

View outline

Fraud Prevention & Detection Policy

Governance for preventing, detecting, investigating, and reporting internal and external fraud, integrated with the AML program.

View outline

Know Your Customer

Know Your Customer (KYC) / Customer Identification Program (CIP) Policy

CIP and KYC procedures including identity verification, risk tiering, and EDD.

View outline

Enhanced Due Diligence (EDD) Policy

Triggers, source-of-funds and source-of-wealth standards, and senior-management approval flows for higher-risk customers.

View outline

Customer Due Diligence & Beneficial Ownership Policy

CDD Rule compliance: legal-entity beneficial ownership, control prong, and customer risk profiling.

View outline

Sanctions

OFAC Sanctions Compliance Policy

OFAC compliance program covering screening, hit review, and blocking procedures.

View outline

Travel Rule

Travel Rule Compliance Policy

VASP counterparty verification, required data elements, transmittal standards, and unhosted-wallet treatment.

View outline

Unhosted (Self-Hosted) Wallet Policy

Proof-of-ownership, blockchain analytics screening, and risk thresholds for deposits to and withdrawals from self-hosted wallets.

View outline

Third-Party Risk

Third-Party Risk Management (TPRM) Policy

Vendor tiering, pre-contract due diligence, contractual safeguards, and ongoing monitoring across the vendor lifecycle.

View outline

Training

Compliance Training Policy

Role-based AML, sanctions, fraud, and consumer-compliance training, with frequency, tracking, and board training standards.

View outline

Records & Retention

Record Retention & Destruction Policy

Retention schedules that satisfy BSA five-year requirements while staying defensible under privacy law, with secure destruction standards.

View outline

Governance & Operations

Customer Data Privacy Policy

Customer disclosures and internal data-handling rules aligned to GLBA, the FTC Safeguards Rule, and state privacy laws (CCPA).

View outline

Business Continuity & Disaster Recovery Plan

Tabletop scenarios examiners care about — outages, key-person loss, vendor failure — with RTO/RPO targets and recovery roles.

View outline

Compliance Program Charter

Board oversight, compliance authority and independence, and reporting cadence — the governance document examiners ask for first.

View outline

Information Security Policy

Administrative, technical, and physical safeguards aligned to the FTC Safeguards Rule — access control, encryption, and incident response.

View outline

Identity Theft Prevention Program (Red Flags Rule)

Red Flags Rule program: identify, detect, respond to, and update for identity-theft red flags in covered accounts.

View outline

Customer Complaint Management Policy

Intake, tracking, resolution, root-cause analysis, and escalation of customer complaints — a core consumer-compliance and UDAAP control.

View outline

Code of Conduct & Ethics Policy

Ethical standards, conflicts of interest, confidentiality, and a culture of compliance applicable to all personnel.

View outline

Whistleblower Policy

Confidential, non-retaliatory reporting channels for misconduct, with investigation and protection standards.

View outline

Templates are educational starting points and do not constitute legal advice. Every policy must be tailored to your institution's products, customers, and jurisdictions and reviewed by qualified compliance counsel before adoption.

Not sure which policies you need?

Run a free 3-minute gap snapshot — we'll flag the documentation gaps examiners look for first. No signup required.

Run My Free Assessment