Scope
Define who the Code covers, which activities are included, and any geographic or role-based exceptions to ensure consistent application.
A well-drafted Code reduces legal and reputational risk, supports regulatory compliance, and sets consistent behavioral expectations across the organization. It creates an auditable record of policies and employee acknowledgments useful in investigations and regulatory reviews.
Typical stakeholders who create and manage a Business Conduct Code.
Successful implementation requires coordination between legal, HR, IT, and business owners to keep policies current and enforceable.
Define who the Code covers, which activities are included, and any geographic or role-based exceptions to ensure consistent application.
Set behavioral rules on conflicts of interest, gifts, confidentiality, anti-bribery, workplace conduct, and use of company assets with clear examples.
Describe how to report concerns, anonymous reporting options, protections against retaliation, and expected investigation timelines and confidentiality limits.
Explain applicable laws and regulations, internal compliance responsibilities, required training, and sanctions for violations tied to disciplinary procedures.
State how the organization audits adherence, conducts periodic reviews, documents acknowledgments, and retains evidence of compliance activities.
Include a process for updating the Code, approving changes, notifying personnel, and recording version history and effective dates.
| Field | Configuration |
|---|---|
| Acknowledgment Method | Checkbox plus electronic signature |
| Authentication | Email link and optional SMS code |
| Reminders | Automated weekly reminders until signed |
| Storage Location | Central compliance repository with access controls |
Ensure the chosen platform supports required authentication, audit trails, secure storage, and integrations with HR systems.
Verify the platform meets compliance needs such as retention, encryption (TLS/AES), role-based access, and evidence export for audits; coordinate with IT and legal when enabling integrations.
Publish Code and notify staff on the effective date.
Require signed acknowledgment within 30 days of issuance.
Conduct a formal review at least once every 12 months.
Schedule refresher training annually or after significant changes.
Preserve signed copies according to retention policy.
Legal and leadership approve the draft before publication.
Authorized executive formally adopts the Code.
All covered parties receive, review, and acknowledge the Code.
Signed records and metadata are archived for compliance and audit purposes.
Company finalizes Code and obtains legal approval.
Leadership adopts a streamlined Code suited to company size.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Yes | Yes | Yes | Yes |
| Bulk Send | Yes (plan dependent) | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |