>FWIW, the permission I seek is from my Legal department. That maybe your job but it isn't the project's job.
We could write the document you need. Then the next comment would probably we that we didn't publish our procedure and have a lawyer sign off on what we did. It is a neverending battle. We do more to advance things, and we get told we need to do more. Enough is enough. That sentence above makes it clear who is getting paid for satisfying those requirements: You.