Update Details: The alphaZ policy templates have been reviewed and updated, partly for changes to ISO standards and partly for Constructionline and the Common Assessment Standard (CAS), with new policies added and V2 versions naming UK legislation included.
Every policy has been through two content reviews and a proofread, and the layout and styles used across the set have been tidied up. Where a scheme asks for a policy that specifies compliance with a particular law, a V2 version naming the relevant UK legislation is included as an additional download on the same page. The V2 versions cover anti-bribery, tax evasion, fraud, modern slavery, whistleblowing, driving, young persons, building safety and several health and safety topics.
New Policy Templates
| P-125 Supplier Policy | Written to share with suppliers and customers, covering how key suppliers are chosen and approved, and what is expected of suppliers, contractors and sub-contractors, including labour-only sub-contractors |
| P-126 Environmental, Social and Governance Policy | An ESG alternative to the P-8 Corporate Social Responsibility Policy, including stakeholder engagement |
| P-120 Artificial Intelligence Policy | Two AI policies: a one-page ISO 42001 AI policy, and a general AI use policy for organisations without an AI management system |
Policy Templates Updated for Constructionline and CAS
| P-68 Fraud and Malpractice Policy | Fraud prevention procedures added |
| P-42 Tax Evasion and Criminal Finances Act Compliance Policy | Covers risk assessment, due diligence and training |
| P-7 Drug and Alcohol Abuse Policy | Covers testing, with random testing limited to safety-critical roles |
| P-114 Cyber Security Policy | Incident response and backups added |
| P-72 Risk Management Policy | Fully expanded |
| P-4 Anti-Slavery Human Trafficking Policy | Records the steps taken each financial year |
| P-105 Construction Products Regulations Policy | Covers supplier monitoring and installation checks |
| P-6 Equal Opportunities and Diversity Policy | Now also serves as the Fairness, Inclusion and Respect policy |
Policy Templates Updated for ISO Standards, Whistleblowing and Health and Safety
| P-1 Quality Policy | Updated for ISO 9001:2026, with the ISO 9001:2015 version kept |
| P-2 Environmental Policy | Updated for ISO 14001:2026, with the ISO 14001:2015 version kept |
| P-14 Whistleblowing Policy | An anonymous route, protection from victimisation, a route for building safety concerns and an external route |
| P-13 Fatigue Risk Management Policy | Restructured |
| P-87 Infection Control Policy | Rewritten around everyday hygiene |
The information security policies follow Cyber Essentials v3.3, with passwords of at least 12 characters and no forced changes, multi-factor authentication always used for cloud services, and critical security updates applied within 14 days. The driving policies check licences before someone first drives and every year after. Across the data protection policies the regulator is now named as the Information Commission (ICO), and the other data protection changes are covered in GDPR Toolkit Updated - AI Use, Retention and Data Protection Rights.
Every policy template is listed in the Policies category;
Policies
