Confluence

Teddy connects to Confluence with a scoped service account. You approve the permission list first.

What Teddy does

• Imports existing policies and procedures
• Pulls evidence from selected spaces
• Flags documents that no longer match your systems

Frameworks and controls

• ISO 27001:2022: clause 7.5 Documented information, A.5.1 Policies for information security, A.5.37 Documented operating procedures
• SOC 2: CC5.3 on policies and procedures
• NIS2: Article 21(2)(a) policies on risk analysis and information system security

How it works

1. You choose the spaces Teddy may read and approve the permissions.
2. Teddy imports your policies and procedures and maps them to the requirements they cover.
3. Approved policy updates can be written back to Confluence, if you allow it.

Access

Read-only, limited to the spaces you select.

Can our policies stay in Confluence?

Yes. Confluence stays your source of truth. Teddy reads the pages, tracks reviews and links them to controls.