Share & embed a policy

Once a policy is published you can share it a few ways.

Hosted link

Every published policy has its own public page. Open the policy in the app to copy its shareable link, then reference it from your website, security.txt, or README.

Embed the policy widget

To render the policy inline on your own site, use the policy widget. Open the policy in the app and copy its embed snippet, then paste it where you want the policy to appear.

The widget renders into a #dscls-policy container, loads in a Shadow DOM so it won’t clash with your site’s styles, and picks up your policy’s branding. It reads the same public API document the hosted page renders (GET /v1/p/policies/<shortcode>), so an embed and the hosted page always show the same content; when a policy is unpublished the embed shows a short “not currently published” panel.

Embedding on your own site is included from the Pro plan. On a plan that does not include it, the widget on your site shows a small card with your organization’s name and a link to the hosted policy page instead of the policy itself; the hosted page is always available. The “Powered by” mark at the foot of the widget is part of the product on every plan below Enterprise, which includes white label.

Read a policy via the API

Published policies are available without authentication from the public API, by id or shortcode:

Fetch a published policy

curl https://api.disclosebot.io/v1/p/policies/<shortcode>

The document carries the policy fields, policy_html (the rendered, sanitized policy text), public_url (the hosted page), and branding. An unpublished or unknown policy is 404.

To create or update policies programmatically, use the authenticated /v1/policies endpoints with a Bearer token; see the API quickstart and the Platform API reference.