Bastion Vault

Every policy, every version, one source of truth.

Policies live in SharePoint, email attachments, and someone's laptop. When an auditor asks "prove this was in effect on March 3rd," most teams can't. BastionIQ keeps every document, every version, and every review date in one encrypted, versioned library.

Book a walkthrough
The problem

Scattered documents are a compliance risk, not just an inconvenience.

Teams lose track of which policy version is current, miss review dates because nothing prompts them, and can't quickly produce the exact document an auditor is asking about. Rebuilding that trail after the fact costs days, and sometimes it can't be rebuilt at all. BastionIQ replaces the scattered folder structure with a single governed library built for audit, not just storage.

How it works

From upload to audit trail

01

Upload and organise

Bring in existing policies, procedures, and evidence documents into one tenant-isolated library, tagged by framework.

02

Track versions automatically

Every edit is retained as a version. Nothing is overwritten or lost; you can always see what changed and when.

03

Set review schedules

Assign a review cadence per document. BastionIQ emails the configured recipients before a policy's review date lapses.

04

Use it as evidence

Pull the exact version you need from the full history, and see your documents suggested as evidence in Bastion Comply.

Capabilities

What Bastion Vault includes

Encrypted storage

Documents are encrypted at rest and in transit, in storage isolated to your organisation.

Full version history

Every revision retained and reviewable; nothing is silently overwritten.

Scheduled review reminders

Configurable review period per document, with automatic email alerts to chosen recipients before it lapses.

Framework tags and lifecycle metadata

Tag documents by framework and record lifecycle details, so you know what each document covers and where it is in its life.

Context for every module

Plans, exercises and the incident room use your Vault documents as context, so what BastionIQ produces reflects your actual policies.

Suggested as compliance evidence

Vault documents are suggested as evidence against controls in Bastion Comply. You confirm each link.

Stale evidence flags

When a newer version supersedes a document, it's flagged as stale evidence for review, so you're not showing an auditor last year's policy.

Audit-ready retrieval

Pull the exact version of any document from its full history when an auditor asks.

Turn your document library into tracked compliance evidence. See Bastion Comply →

Always
ready

Always audit-ready, not just when you remember to check.

A missed review date or a missing policy version during an audit isn't just an inconvenience. It can mean a failed certification, a lost contract, or a regulatory finding. BastionIQ Vault ensures every document is current, every review is tracked, and every version is retrievable in seconds.

Your audit trail starts today.

Bastion Vault is included in every paid plan, with no add-on required.

Book a walkthrough