Internal policy drafting for regulatory compliance