Policies & Templates
AS | Ankit Sarawagi|Founder, CFOmatrix·June 2026 |
Free, editable company policy templates for Indian startups and businesses, covering HR, governance and IT / SOC 2. Each is a Word document with the standard content already written and updated to current law; the few things you may want to change are marked in blue. Add your company name once in the header, tweak the blue text, and you are ready.
How to use these templates
Download the policy you need, add your company name and letterhead once in the header, then review the blue text (standard defaults) and change only what differs for you. These are general templates, not legal advice, so have important policies reviewed by an HR or legal professional before adopting them.
All 41 templates
HR & People Policy Templates
Employee Handbook Template Leave Policy Template POSH Policy Template Recruitment and Hiring Policy Template Grievance Policy Template Disciplinary Policy Template Performance Improvement Plan (PIP) Policy Template Gratuity and Separation Benefits Policy Template Equal Opportunity Policy Template Medical Insurance and Benefits Policy Template Work From Home Policy Template Travel and Expense Policy Template Maternity and Paternity Leave Policy Template Notice Period and Exit Policy Template Moonlighting and Conflict of Interest Policy Template Social Media Policy TemplateGovernance & Compliance Policy Templates
Code of Conduct Template Anti-Bribery and Corruption Policy Template Whistleblower Policy TemplateIT, Security & SOC 2 Policy Templates
Information Security Policy Template Acceptable Use Policy Template Access Control Policy Template Password Policy Template Encryption Policy Template Asset Management Policy Template Data Classification Policy Template Data Protection and Privacy Policy Template Data Retention and Deletion Policy Template Backup Policy Template Business Continuity Plan (BCP) Template Disaster Recovery (DR) Policy Template Incident Response Policy Template Data Breach Response Policy Template Remote Access Policy Template Change Management Policy Template Vendor Risk Management Policy Template Vulnerability Management Policy Template Risk Assessment Policy Template Physical Security Policy Template Clear Desk and Clear Screen Policy Template BYOD Policy TemplateHR & People Policy Templates
Employee Handbook Template
The master handbook that ties all your people policies together: working hours, conduct, leave, payroll, benefits and exit. Give every new hire one.
Download the Word template Read in detail →Leave Policy Template
Casual, sick, earned, maternity and paternity leave with accrual, carry-forward and encashment, pre-filled with standard Indian entitlements.
Download the Word template Read in detail →POSH Policy Template
Legally mandatory at 10 or more employees: the Internal Committee, complaint procedure and timelines under the POSH Act, 2013.
Download the Word template Read in detail →Recruitment and Hiring Policy Template
A fair, consistent hiring process: sourcing, interviews, background checks, offers and referrals.
Download the Word templateGrievance Policy Template
How employees raise concerns and how you resolve them, with stages, timelines and non-retaliation.
Download the Word templateDisciplinary Policy Template
Misconduct categories and a fair disciplinary procedure (show-cause, inquiry, penalties) following natural justice.
Download the Word templatePerformance Improvement Plan (PIP) Policy Template
When and how to run a PIP: objectives, duration, support and outcomes, done fairly.
Download the Word templateGratuity and Separation Benefits Policy Template
Gratuity under the Payment of Gratuity Act, 1972, plus full-and-final settlement and exit clearance.
Download the Word templateEqual Opportunity Policy Template
Non-discrimination and disability inclusion (RPwD Act, 2016) across hiring, pay and promotion.
Download the Word templateMedical Insurance and Benefits Policy Template
Your group health cover and employee benefits: coverage, dependents and the claims process.
Download the Word templateWork From Home Policy Template
Remote and hybrid rules: eligibility, availability, equipment, reimbursement and data security.
Download the Word template Read in detail →Travel and Expense Policy Template
Eligible expenses, per-diems, approval limits and the claim process, with a per-diem table.
Download the Word templateMaternity and Paternity Leave Policy Template
26-week maternity (Maternity Benefit Act), adoption and creche provisions, plus paternity leave.
Download the Word template Read in detail →Notice Period and Exit Policy Template
Notice by level, buyout, garden leave, full-and-final, knowledge transfer and asset return.
Download the Word templateMoonlighting and Conflict of Interest Policy Template
Disclosure rules and limits on dual or competing employment and related-party dealings.
Download the Word templateSocial Media Policy Template
Personal vs official use, confidentiality, brand and disclosure rules online.
Download the Word templateGovernance & Compliance Policy Templates
Code of Conduct Template
Your baseline ethics: integrity, conflicts, confidentiality, respect, and how to report violations.
Download the Word template Read in detail →Anti-Bribery and Corruption Policy Template
No bribes, kickbacks or facilitation payments; gift limits and third-party rules (PCA 1988, FCPA, UK Bribery Act).
Download the Word templateWhistleblower Policy Template
Safe, confidential channels to report wrongdoing, with strict non-retaliation.
Download the Word templateIT, Security & SOC 2 Policy Templates
Information Security Policy Template
The master security policy your SOC 2 or ISO 27001 audit starts with: objectives, roles and the sub-policies below.
Download the Word template Read in detail →Acceptable Use Policy Template
How people may use company systems, devices and data, with monitoring and a sign-off.
Download the Word templateAccess Control Policy Template
Least privilege, role-based access, joiner-mover-leaver and periodic access reviews.
Download the Word templatePassword Policy Template
Length, MFA, password managers and modern (NIST) rotation guidance.
Download the Word templateEncryption Policy Template
Encryption in transit and at rest, key management and approved algorithms.
Download the Word templateAsset Management Policy Template
Inventory, ownership, classification, return on exit and secure disposal.
Download the Word templateData Classification Policy Template
Public, Internal, Confidential and Restricted tiers, with handling rules per tier.
Download the Word templateData Protection and Privacy Policy Template
Built on the DPDP Act, 2023: consent, data-principal rights, retention and breach notification.
Download the Word template Read in detail →Data Retention and Deletion Policy Template
How long you keep each data type and how you securely delete it, with a retention table.
Download the Word templateBackup Policy Template
Backup frequency, retention, encryption, offsite copies and restore testing.
Download the Word templateBusiness Continuity Plan (BCP) Template
Keep critical operations running: BIA, RTO/RPO, roles and testing.
Download the Word templateDisaster Recovery (DR) Policy Template
Recover systems after an outage: DR strategy, RTO/RPO and runbooks.
Download the Word templateIncident Response Policy Template
Detect, contain and recover from incidents, with CERT-In 6-hour reporting.
Download the Word templateData Breach Response Policy Template
Respond to a personal data breach and notify the Data Protection Board and affected people.
Download the Word templateRemote Access Policy Template
Secure VPN and MFA remote access, managed devices and third-party access.
Download the Word templateChange Management Policy Template
Controlled changes: approval, testing, rollback and an audit trail.
Download the Word templateVendor Risk Management Policy Template
Vet and monitor third parties: due diligence, data processing agreements and risk tiering.
Download the Word templateVulnerability Management Policy Template
Scanning, patching SLAs and penetration testing, with a severity table.
Download the Word templateRisk Assessment Policy Template
Identify, score, treat and review risks in a risk register.
Download the Word templatePhysical Security Policy Template
Premises and server-room access, visitors, CCTV and environmental controls.
Download the Word templateClear Desk and Clear Screen Policy Template
Lock screens and secure documents to prevent data exposure.
Download the Word templateBYOD Policy Template
Rules for personal devices: MDM enrollment, minimum security and remote wipe.
Download the Word templateNeed these tailored to your company, or a SOC 2-ready policy set? CFOmatrix helps startups put in place HR, governance and security policies that pass client and investor due diligence. Talk to CFOmatrix |
Frequently Asked Questions
Are these policy templates free?
Yes. Every template on this page is free to download and edit. Each is a Word document with the standard content pre-filled and the bits you may want to change marked in blue.
How do I use these templates?
Download the policy you need, add your company name and letterhead once in the header, then review the blue text (default values) and change only what differs for you. Have it reviewed by an HR or legal professional before you adopt it.
Are the templates updated for Indian law?
Yes, they reflect current Indian law (for example the POSH Act 2013, the Maternity Benefit Act, the Payment of Gratuity Act, and the Digital Personal Data Protection Act 2023). Rules change, so verify the current position before adopting.
Which policies do I need for SOC 2 or ISO 27001?
The IT, Security and SOC 2 section below covers the policy set an audit expects, including Information Security, Access Control, Password, Encryption, Data Protection, Incident Response, Business Continuity, Vendor Management and more.
Which HR policies are legally mandatory in India?
A POSH policy and Internal Committee are mandatory at 10 or more employees. Maternity benefits and gratuity are statutory. Others (leave, code of conduct, disciplinary) are strongly recommended and often required by clients and investors.
These are general templates for India, not legal advice, and may not cover your specific situation. Verify current law and have important policies reviewed by a qualified professional before adopting them.