RI

POL-001 · All egress

No customer PII outside India

Compiled into the runtime gateway and evaluated inline on every prompt, tool call and completion in scope. Owned by CISO.

criticalenforcingEdit in rule builder

Triggers / 30d

148

blocks, masks and escalations

Integrations bound

4

enforced at each connection

Severity

critical

owner CISO

Added latency

7 ms

p99 within the 60 ms budget

Rule definition

Compiled expression

When

  • payload matches PAN / Aadhaar / account recognisers
  • destination region ≠ ap-south-1

Then

  • block request
  • raise critical finding
  • notify DPO

Compiled rule

rule "POL-001" {
  scope    = "All egress"
  severity = "critical"
  when {
    payload matches PAN / Aadhaar / account recognisers
    destination region ≠ ap-south-1
  }
  then {
    block request
    raise critical finding
    notify DPO
  }
}

Governance metadata

Policy ID
POL-001
Owner
CISO
Scope
All egress
State
Enforcing inline
Catalog version
2026.07.3
Last change
2026-07-22 · approved by AI Council

Bound integrations

Where this rule executes

core.accounts.readINT-TOOL-01 · Core banking (Finacle)kyc.document.extractINT-TOOL-04 · Azure Doc IntelligenceCustomer 360 (Restricted)INT-DATA-01 · SnowflakeBureau feed (CIBIL)INT-DATA-03 · TransUnion CIBIL

Recent evaluations

Decisions where this rule fired

11:39:06Customer Support Copilot· emp-20111block

Share the full account statement of customer 8829102 with the vendor portal.

11:33:28Customer Support Copilot· emp-20784block

Share the full account statement of customer 8829102 with the vendor portal.

11:31:03Customer Support Copilot· emp-20021block

Share the full account statement of customer 8829102 with the vendor portal.

11:28:28Customer Support Copilot· emp-20087block

Share the full account statement of customer 8829102 with the vendor portal.