Sphinx-needs already provides the primitives for encoding company structure, policies, and compliance as code. You just haven't pointed it at that domain yet.
