Are we required to have a formal Regulation D policy?

No, we are not aware of any requirement to establish a formal Regulation D policy.