PolicyReady › Support
PolicyReady Support
Published by Baker Ventures LLC · Last updated: September 23, 2026
PolicyReady walks a small business through the security controls insurers actually ask about, so you know where you stand and what to fix before you apply or renew.
Please note. PolicyReady is an educational readiness tool. It is not insurance, legal, or security-audit advice. It scores your readiness from your own self-reported answers against published frameworks, which makes it a structured estimate of where you stand — not a security audit, not a penetration test, and not a guarantee against a breach. It does not sell, bind, or guarantee any policy, and a high readiness score does not mean an insurer will approve you or lower your premium: underwriting is the insurer's decision, made on their own application, which is what governs your coverage. Confirm anything you rely on with your IT or security lead, and talk to a licensed broker about coverage and an attorney about legal questions.
Frequently asked questions
- Is PolicyReady insurance, legal, or security advice?
- No. It's an organizational tool that explains common controls and tracks your answers. Your insurer's actual application is what governs your coverage.
- Where do the control explanations come from?
- A curated set based on general and official cybersecurity sources — CISA Cross-Sector Cybersecurity Performance Goals, the NIST Cybersecurity Framework, and the CIS Controls. We don't fabricate controls or requirements.
- Will a high readiness score get me approved or lower my premium?
- No. The score reflects the controls you marked in place. Underwriting is the insurer's decision, based on their own application. If a specific control's scoring looks off, tell us which one and we'll review how it's weighted.
- What do “in place,” “partial,” and “missing” mean?
- In place = the control is fully implemented; partial = started but incomplete; missing = not yet addressed. The score and to-do list weight them accordingly.
- What's in the exported summary?
- The controls you marked in place, your gaps ranked by weight, your own notes, and anything you haven't answered shown as not yet assessed. Nothing is filled in for you or guessed. It's formatted to hand to a broker.
- Is my company's security data sent anywhere?
- No. Everything stays on your device — no account, no studio server, so your answers and readiness report never leave the phone and we can't see them. Export the summary to share it deliberately.
- Can I track more than one business?
- Yes — separate profiles, each with its own controls and score, free for everyone.
- I don't understand a control — can you set it up for me?
- No. PolicyReady explains what a control is and how it's typically satisfied, but implementing it is up to you or your IT provider.
- Do the questions match my specific insurer's form?
- They cover the controls most cyber applications ask about. Your insurer's form may differ — use PolicyReady to prepare, then answer their actual application.
- How do I show progress over time?
- Retake the assessment any time — your answers update in place and the score reflects where you stand now. There's no separate history log; export a summary first if you want a dated record to compare against later.
- Something's broken. How do I report it?
- Email us with: (1) your device and OS version, (2) what you were doing, (3) what you expected versus what happened, and (4) a screenshot with anything sensitive blurred. That usually points us straight at it.
Price
PolicyReady is free, with no in-app purchase, no subscription, and no account. There’s nothing to buy, cancel, or refund.
Contact