Write Policies a Manager Can Apply, and Give Every Obligation an Owner
Software companies carry expectations from three directions: employment obligations, client contracts and data protection concerns that vary by market. We help you write the core policies, reflect client terms, keep a compliance calendar with owners and dates, control versions and record acknowledgements. GullyHR does not give legal advice, so you confirm the obligations that apply with a qualified professional.
Not sure what you need? Tell us about your business in six short steps and we will come to the first meeting prepared.
Share your requirementsThe starting point
Can a Manager Find the Current Policy and Apply It?
Early handbooks are supplemented by emails and chat announcements. Remote work, device use, data handling, intellectual property and outside work are covered unevenly, or left to each manager.
We help you build a framework that is written, owned and findable.
You may be experiencing:
- A handbook from the early years, supplemented by emails and chat announcements.
- Remote and hybrid working left to each manager to decide.
- Client contract terms on confidentiality, background checks, security training and access known to delivery but not to HR.
- Obligations arriving from several states and entities, with dates that change and nobody owning the calendar.
- Acknowledgements collected for some policies and not others.
- Several versions of the same policy in circulation.
- Moonlighting and side projects handled case by case, and differently each time.
What we can help with
Our Policies, Compliance and Governance Services for Software Companies
Policy Inventory and Gap Review
List every policy, announcement and practice now in use, mark what is missing, outdated or contradictory, and agree which gaps matter first.
Core Policy Set
Draft the policies a software company most often needs, such as code of conduct, remote and hybrid work, acceptable use of devices and systems, data handling and confidentiality, leave and attendance and outside work, for you to review with your adviser.
Client Obligation Register
Gather people-related terms from client contracts, such as background checks, security training and access rules, and map them to policy, owner and evidence, so HR knows what delivery has promised.
Outside Work and Intellectual Property Position
Help you state your position on moonlighting, side projects and ownership of work, in words managers can apply the same way each time. The legal effect remains for your adviser to confirm.
Compliance Calendar
Build a calendar of recurring obligations across entities and locations, each with an owner, a due date, the evidence required and a reminder. Your adviser confirms what belongs on it.
Version Control and Acknowledgement
Set how policies are numbered, approved, published and retired, and how each employee's acknowledgement is recorded and retrievable.
Record Keeping
Define which HR records are kept, where, for how long and who may see them. Retention periods are confirmed with your adviser before they are applied.
Periodic Review and Audit Readiness
Schedule policy reviews and an internal check of evidence against the calendar and client terms, with findings assigned to owners and tracked.
The deliverables
What You Receive
Depending on the agreed scope, deliverables can include:
- A policy inventory and gap list.
- Draft core policies for review with your adviser.
- A client obligation register with owners.
- A written position on outside work and intellectual property.
- A compliance calendar with owners and evidence rules.
- A version and acknowledgement process.
- A record keeping schedule.
- A review calendar and an internal check format.
Step by step
How We Work
Gather What Exists
We collect your handbook, circulars, client contract extracts and the compliance items you already track.
Find the Gaps and Conflicts
We compare what is written with what managers actually do, and note where client terms are not yet reflected.
Draft the Framework
We prepare policies, the obligation register and the calendar in plain language, and mark every point your adviser must confirm.
Publish and Record
We help you publish the final versions, collect acknowledgements and configure reminders in your system or on GullyHR.
Review Against the Baseline
Before work starts we note where you stand. We then review coverage, acknowledgements and calendar status with you.
The difference
Make Policy and Compliance Visible and Owned
A governed policy framework helps your company:
We do not promise outcomes. We record a baseline before work starts, covering policies with a current approved version, acknowledgement coverage and obligations without a named owner, and report against it, so you can see what changed and what did not.
- Find a single current version of each policy.
- Apply remote, device and data rules the same way across teams.
- Keep client terms and HR practice aligned.
- Give every recurring obligation an owner and a date.
- Show who acknowledged which version.
- Handle outside work consistently.
Find your fit
Who This Service Is For
Software Companies Serving Clients with Contract Terms
Link client requirements to internal policy.
Companies Operating in Several States or Entities
Track obligations that differ by location.
Growing Product Companies
Replace a founder-era handbook with a maintained set.
Distributed and Remote-first Teams
Write policies that suit work done outside an office.
HR Teams Preparing for a Client or Customer Audit
Collect the evidence in one place.
How it usually shows up in information technology and software
Policies in software companies are often a handbook written in the early years, supplemented by emails and chat announcements. Remote and hybrid working, device and acceptable use, data handling, intellectual property and outside work are covered unevenly or left to each manager. Client contracts add terms about confidentiality, background checks, security training and access that are known to the delivery team and not to HR. Obligations arrive from several states and entities, with dates that change, and nobody owns the calendar. Acknowledgements of policy are collected for some policies and not for others, and versions are not tracked. Moonlighting and side projects are a regular issue, handled inconsistently case by case, which is where disputes begin.
Common challenges
Where it goes wrong in information technology and software
Policies are scattered
Rules live in the handbook, emails and chat, and managers cannot find the current one.
Client terms bypass HR
Contract requirements on checks and training are known only to delivery.
Obligations have no owner
Dates and filings depend on whoever remembers them.
Outside work is unaddressed
Moonlighting and side projects are decided case by case.
A better process
What a working version looks like
- 01
Write the core set
Remote and hybrid work, acceptable use and devices, data handling, intellectual property and outside work, in plain language. The policy framework holds the list.
- 02
Reflect client obligations
A register of client contract terms that touch people, with the internal policy and owner for each.
- 03
Keep a compliance calendar
Each obligation with an owner, a date and an evidence record, reviewed monthly. The compliance framework shows the layout.
- 04
Control versions and acknowledgement
One current version of each policy, a date and a recorded acknowledgement from each employee. See policy and document centre.
- 05
State the outside-work position
What is allowed, what needs approval and what is not allowed, with the reason, applied alike to all.
What to check this week
- Ask a manager where the current remote work policy is kept.
- List the client contracts that include people-related terms.
- Find the owner and next date for each recurring obligation.
- Check acknowledgement records for the latest data handling policy.
- Confirm the statutory position with a qualified professional.
Confirm with a qualified professional. What applies depends on your establishment, your state and your sector, and it changes. This page describes a practice; it does not state a legal position.
What this looks like in information technology and software
The parts of policies, compliance and governance that are specific to this sector, rather than general.
Policies for Distributed and Client Work
Data, remote work and client obligations.
What this coversHide
Policies for Distributed and Client Work
Data, remote work and client obligations.
What this coversHideSoftware businesses carry policy obligations that arrive from three directions: employment law, client contracts, and data protection expectations that vary by the markets they serve.
- Data handling and confidentiality policy covering client data
- Client contractual obligations reflected in internal policy
- Remote and hybrid working policy stated rather than improvised
- Acceptable use, device and access policies
- Intellectual property and moonlighting position stated clearly
- Multi-location and multi-entity obligations tracked
- Named owner per obligation, with review dates
- Acknowledgement records maintained and retrievable
The moonlighting position is worth stating explicitly rather than leaving to assumption, because in this sector it arises regularly and inconsistent handling creates the real problem.
Questions on this, in information technology and software
Commonly a code of conduct, remote and hybrid work, acceptable use, data handling and confidentiality, leave and attendance and outside work. The right set depends on your clients and size, and your adviser should confirm what applies.
No. GullyHR does not give legal advice. We build the policy framework, the ownership and the calendar. Statutory obligations vary by state, sector, establishment type and headcount, and they change, so confirm what applies with a qualified professional.
Contracts can ask for background checks, security training, access limits and confidentiality undertakings. We map these to policies and owners so that HR knows what has been promised and can show evidence when a client asks.
We can draft a position in plain language, covering what is allowed, what needs approval and what is not allowed, and how conflicts are handled. Its legal effect should be confirmed with your adviser before use.
Each policy has a version and each employee's acknowledgement is recorded against it, with reminders for those outstanding. We can set this up in your HR system or on the GullyHR platform.
Set a fixed review date for each, usually yearly, and review sooner when a client term, a location or the law changes. We build the calendar and name the owner, and your adviser confirms legal changes.
Many contain terms on checks, training, access and confidentiality for people assigned. HR needs a register so that internal policy matches what was promised.
They show that employees saw the current policy and when. Without them, enforcing a rule is harder.
State the position clearly, including what needs approval, and apply it equally. Inconsistent handling does more damage than either strict or relaxed rules.
Give Your Policies and Obligations an Owner
If policies live in old emails and obligations depend on someone's memory, start by listing what you have and who owns it.
Prefer to talk first? Call +91 80958 58589 or write to hello@gullyhr.com.
Book a Policy Consultation
Tell us about your teams, clients and the policies you already have.
The general method — what policies, compliance and governance covers, the questions it answers and what an engagement produces — is the same whatever the sector, and is set out on the hr policies and governance page. What is above is the part that differs for information technology and software.
To run this in a system rather than on paper, see policy and document centre.
Other HR topics for information technology and software
Where to start
Most engagements begin with a review of how this runs in your business today, then a written process and the sequence to implement it.
See all HR topics for information technology and software, or another industry.