Skip to content
SPECIFICTION
Get listed

Firmis

firmis.io

From $299/mo Free plan Web
Visit firmis.io
Spec score 8.6 #2 of 23 in HR Policy Management Software

What it is

Firmis is a web-based Governance, Risk, and Compliance platform for managing internal policies and employee attestations. It records policy versions with timestamps and approvals, and tracks who signed a policy, when they did so, and which version they acknowledged. Drafting, approval, publication, and deletion are among the actions captured in its automatic audit trail. Teams can upload.txt,.docx, or.pdf policies or generate documents from compliance templates. Listed frameworks include HIPAA, SOC 2, ISO 27001, GDPR, CCPA, and SOX; the templates are informational and not legal advice. Firmis describes encryption at rest, TLS encryption in transit, and database-level Row Level Security to separate organization data. After account closure, data is held for 90 days before deletion, although audit logs and attestations may be kept as legal evidence. The free Starter plan covers up to five policies, one framework, and ten team members. Growth is $299 a month and Scale is $799 a month, both at founding-member pricing locked for 12 months.

Spec sheet

What it does
Firmis is a governance, risk and compliance platform for managing internal policies, version history and employee attestations.Read 15 Oct 2026 · firmis.io
Product
Firmis is an enterprise Governance, Risk, and Compliance platform for managing internal policies, tracking version history, and collecting digital employee attestations.Read 30 Sep 2026 · firmis.io
API
The Growth plan includes API access, but the public pages do not provide endpoint or SDK documentation.Read 15 Oct 2026 · firmis.io
Integrations
Growth includes BambooHR HRIS synchronization and Slack notifications; Scale adds SSO.Read 15 Oct 2026 · firmis.io
Security
Firmis states that it uses encryption at rest, TLS encryption in transit, and database-level Row Level Security to isolate organization data.Read 30 Sep 2026 · firmis.io
Support
Starter provides self-serve documentation, Growth provides email support and Scale provides priority support and onboarding.Read 15 Oct 2026 · firmis.io
Headquarters
United StatesRead 28 Sep 2026 · firmis.io
Attestations
Firmis records which employee signed a policy, when they signed and which version they acknowledged.Read 15 Oct 2026 · firmis.io
Audit trail
Policy actions such as drafting, approval, publication and deletion are logged automatically.Read 15 Oct 2026 · firmis.io
Company mission
Lauland Labs says its mission is to provide enterprise-grade governance tools that are intuitive like a modern text editor and robust like a legal ledger.Read 30 Sep 2026 · firmis.io
Compliance templates
Firmis provides templates for HIPAA, SOC 2, ISO 27001, GDPR, CCPA, and SOX frameworks, with a disclaimer that they are informational and not legal advice.Read 30 Sep 2026 · firmis.io
Dashboard
The administrator overview shows readiness score, pending actions, document status and recent activity.Read 15 Oct 2026 · firmis.io
Data processors
The privacy policy names Supabase for hosting and Stripe for billing as trusted processors.Read 15 Oct 2026 · firmis.io
Data retention
After account closure, data is held for 90 days before deletion, while audit logs and attestations may be retained as legal evidence.Read 15 Oct 2026 · firmis.io
Document import
Documentation says policies can be uploaded as TXT, DOCX or PDF files.Read 15 Oct 2026 · firmis.io
Document upload
The documentation says policies can be uploaded as .txt, .docx, or .pdf files, or generated from a compliance template.Read 30 Sep 2026 · firmis.io
Draft visibility
Members can view published policies but cannot see drafts.Read 15 Oct 2026 · firmis.io
External company profile
Lauland Labs describes itself as a software studio building focused, audit-ready SaaS applications for compliance, housing and health tracking.Read 15 Oct 2026 · laulandlabs.com
External compliance focus
Lauland Labs identifies SOC 2 as a compliance track for its products.Read 15 Oct 2026 · laulandlabs.com
External industry scope
The studio lists SaaS compliance, public housing, renal/dialysis and NDE/QC inspection among its served industries.Read 15 Oct 2026 · laulandlabs.com
External operating background
Lauland Labs says its team has more than ten years of field-operations experience in quality control, NDE reporting and HUD regulatory standards.Read 15 Oct 2026 · laulandlabs.com
External portfolio size
Lauland Labs reports three products shipped across its portfolio.Read 15 Oct 2026 · laulandlabs.com
External positioning
The maker's studio describes Firmis as tamper-proof policy workflows and immutable audit trails for small SaaS teams facing their first compliance review.Read 15 Oct 2026 · laulandlabs.com
External product status
Lauland Labs lists Firmis as live and open for customers.Read 15 Oct 2026 · laulandlabs.com
Legal owner
Firmis is owned and operated by Lauland Industries LLC, a Texas LLC doing business as Lauland Labs.Read 15 Oct 2026 · firmis.io
Limit: documentation depth
The public documentation explains navigation and member signing but does not publish API reference, SDK details or self-hosting instructions.Read 15 Oct 2026 · firmis.io
Limit: higher-tier controls
SSO, extended retention and custom workflows are reserved for the Scale tier.Read 15 Oct 2026 · firmis.io
Limit: plan caps
Starter is capped at five policies and ten team members, while Growth is capped at fifty and Scale at two hundred.Read 15 Oct 2026 · firmis.io
Maker headquarters
Lauland Labs says it is based in the United States.Read 15 Oct 2026 · firmis.io
Member workflow
Members receive secure email links, read assigned policies and sign by entering their full name.Read 15 Oct 2026 · firmis.io
Praise: audit evidence
The product's published positioning emphasizes immutable records of versions, approvals and signatures to answer auditor requests.Read 15 Oct 2026 · laulandlabs.com
Security controls
Firmis states that it uses encryption at rest, TLS in transit and database-level row-level security to isolate organizations.Read 15 Oct 2026 · firmis.io
Supported frameworks
Templates cover HIPAA, SOC 2, ISO 27001, GDPR, CCPA and SOX, while the Scale plan also lists NIST CSF and PCI-DSS.Read 15 Oct 2026 · firmis.io
Target customers
Firmis describes itself as audit trail and policy management for regulated teams and compliance-focused organizations.Read 30 Sep 2026 · firmis.io
Template generation
Administrators can generate policies from compliance templates.Read 15 Oct 2026 · firmis.io
Template limitation
Firmis states its compliance templates are informational and do not constitute legal advice or guarantee compliance.Read 15 Oct 2026 · firmis.io
Version history
The service records every policy version with timestamps and approval information.Read 15 Oct 2026 · firmis.io

Plans and prices

Starter Free up to 5 policies · 1 compliance framework · basic version control · PDF export · up to 10 team members · self-serve docs Read 15 Oct 2026 · firmis.io
Growth $299 a month founding member pricing locked for 12 months up to 50 policies · 3 frameworks (SOC 2, HIPAA, ISO 27001) · AI policy editor · BambooHR sync · attestation campaigns · tamper-proof audit trail · Slack notifications · API access · up to 50 team members · email support Read 15 Oct 2026 · firmis.io
Scale $799 a month founding member pricing locked for 12 months up to 200 policies · 7 frameworks (SOC 2, HIPAA, ISO 27001, GDPR, NIST CSF, PCI-DSS, CCPA) · Growth features · SSO · extended audit retention · custom workflows · up to 200 team members · priority onboarding · priority support Read 15 Oct 2026 · firmis.io

Every Firmis plan and price →

Strong points and limits

Strong points

  • Tracks policy versions with timestamps and approvals.
  • Logs policy actions automatically.
  • Accepts .txt, .docx, and .pdf uploads.
  • Includes templates for multiple compliance frameworks.
  • Growth includes BambooHR sync, Slack notifications, and API access.

Limits

  • Starter allows up to five policies.
  • Starter includes only one compliance framework.
  • Growth costs $299 a month.
  • Scale costs $799 a month.

Who it suits

Firmis suits regulated teams and compliance-focused organizations that need policy version tracking, attestations, and an audit trail. Its web-based plans range from a small free tier to options for larger teams.

Firmis in depth

Read the full write-up

Firmis is a web-based governance and compliance workspace for organizations that must control policy versions and prove employee sign-offs. It suits regulated teams more than general HR departments. The free Starter tier is a useful small-team entry point, while serious capacity and integrations require costly paid plans.

Overview

Firmis combines policy documents, revision history, employee attestations, and an event record for policy actions. Each acknowledgment is attached to the precise version an employee signed, so a later policy change does not obscure which rule was accepted. That narrow focus is valuable when an audit requires a defensible chain from drafting through approval and publication, but it is not a broad human-resources system.

Key features

Policies can be imported as.txt,.docx, or.pdf files, or started from compliance templates. The template library covers HIPAA, SOC 2, ISO 27001, GDPR, CCPA, and SOX. These materials are informational rather than legal advice, making them useful scaffolding for a compliance program but not a replacement for professional interpretation.

Version records include timestamps and approvals. Firmis records who signed a policy, when the signature occurred, and the version involved. Draft creation, approval, publication, and deletion are logged automatically, giving compliance staff a chronological record of policy handling rather than relying on manual spreadsheets.

The service states that data is encrypted at rest and with TLS in transit, with database-level Row Level Security separating organizations. When an account closes, data remains for 90 days before deletion; audit logs and attestations may be kept as legal evidence. That retention behavior matters to teams with contractual or regulatory record-keeping duties.

Growth adds BambooHR synchronization, Slack notifications, and API access, while Scale adds single sign-on. Starter relies on self-serve documentation, Growth provides email support, and Scale includes priority onboarding and support.

Pricing

Starter

Starter is free and includes up to five policies, one compliance framework, basic version control, PDF export, and up to 10 team members. It is appropriate for a small organization establishing a formal policy process. The five-policy and single-framework ceilings make it a poor fit for a mature compliance library.

Growth

Growth costs $299 a month, with founding-member pricing locked for 12 months. It raises capacity to 50 policies and 50 team members, supports three frameworks (SOC 2, HIPAA, and ISO 27001), and adds an AI policy editor, BambooHR sync, attestation campaigns, a full tamper-proof audit trail, Slack notifications, API access, and email support. This is the practical tier for a growing regulated team that needs integrations, but the monthly commitment is substantial compared with the free plan.

Scale

Scale costs $799 a month, also at founding-member pricing locked for 12 months. It supports up to 200 policies and 200 team members, all seven frameworks (SOC 2, HIPAA, ISO 27001, GDPR, NIST CSF, PCI-DSS, and CCPA), plus Growth features, SSO, extended audit retention, custom workflows, and priority onboarding and support. It targets larger or more heavily audited organizations; smaller teams are paying for headroom they may not use.

A 30-day trial is available. Founding-member pricing is locked for 12 months, so buyers should budget for the terms after that period rather than treating the initial rate as permanent.

Platforms

Firmis runs on the web. Its HRIS integration is specifically BambooHR, and SSO is reserved for Scale.

Who it's for

Choose Firmis if your organization needs version-specific attestations, an automatic policy activity trail, and framework-oriented templates. Starter suits a small team with a limited policy set; Growth fits organizations that need HR and messaging connections; Scale is aimed at larger compliance operations requiring SSO, custom workflows, and longer audit retention. Organizations seeking broad employee self-service or general HR administration should choose a different category of product.

Pros and cons

Pros: signatures remain tied to the exact policy version; policy actions are logged automatically; framework templates cover major regulatory programs; encryption and Row Level Security address core data-isolation concerns; the free tier supports up to 10 team members.

Cons: Starter is capped at five policies and one framework; BambooHR, Slack, API access, and campaigns require Growth; SSO and custom workflows require Scale; paid pricing is high for smaller organizations; templates are not legal advice.

Alternatives

Browse HR Policy Management Software for a wider category comparison. Pick Corethix Policies instead if you need Android, iOS, and web access from a paid product with a trial. HRDocket Employee Self-Service is the better starting point for a freemium web service with a free plan aimed at employee self-service. Choose TrackOlap Policy Center when Android, iOS, API, and web coverage matters. AirMason suits teams wanting handbook-focused policy publishing. DocTract is an alternative with per-user pricing supplied through checkout or an order form. NEOGOV Insight targets agencies needing a customized platform. Akcepta offers self-hosted and web deployment with a free one-policy tier. Accedo is a freemium web option with a free plan for up to 25 users.

Verdict

Firmis is a strong choice for regulated teams whose priority is proving exactly which policy version each employee accepted and preserving the actions around it. Choose Starter for a small, focused program, Growth for integrated operations, or Scale for larger audit requirements. Look elsewhere if you need broad HR functionality, mobile-native access, or lower-cost capacity beyond a handful of policies.

Verdict

Firmis centers on policy history, employee attestations, and logged policy actions. Check the plan limits and founding-member pricing terms against the organization’s framework and team needs.

Where Specifiction places it

Alternatives to FirmisAll alternatives →