IDENTOS, a leading Canadian identity, privacy, and authorization company, has announced that PolicyArc is now generally available. The new solution gives security, platform, and compliance teams a single place to define, enforce, and audit access policy across their applications. PolicyArc is built to solve one of fastest-moving problems in enterprise software: how to safely extend access not just to people and services but to AI agents now acting on their behalf.
Companies are adopting AI agents that act inside systems, pulling data, taking actions, and making decisions. Traditional access control wasn't built to give agent just enough access, for just long enough, and nothing more. According to IBM and Ponemon Institute's 2026 Cost of a Data Breach Report, 92% of organizations that experienced AI-related breach lacked proper AI access controls.
PolicyArc addresses that risk along with familiar challenge of access policies slow to change and difficult to audit.
Safe access for AI agents: People can grant AI agent scoped, time-limited version of own access, enough for agent to do job, automatically revoked when task or window ends.
Consent, enforced every time: Access isn't just checked against policy; checked against what data owner has actually agreed to, on every request, not just at login.
Decisions based on what's happening right now: Access decisions combine standing facts such as role and identity verification with real-time context such as resource sensitivity and workflow stage to allow, deny, or ask for extra verification in moment.
One policy, everywhere, updated in minutes: Define resource type once and policy applies consistently across every connected application. New resource types and policies can be added without rewriting integrations.
An audit trail by default: Every access decision automatically logged and reportable. Audit and compliance evidence exists from day one, instead of being reconstructed after fact.
"Today marks a natural evolution for IDENTOS in the era of AI. PolicyArc takes everything we've learned about access and identity and applies it to the question every enterprise is now asking: how to adopt AI without losing control," said Mike Cook, CEO, IDENTOS.
"Most systems only know how to grant broad, standing access. That's fine for a person, but reckless for an agent," said Alec Laws, CTO, IDENTOS. "We built PolicyArc so a team can hand an agent exactly the permission it needs for one task, nothing more. When the task ends, the access disappears, and every decision is on record."
About PolicyArc
PolicyArc, powered by IDENTOS, is authorization layer for enterprises deciding, enforcing, and proving every access decision so security teams can adopt AI with accountability built in. Designed for every AI agent, service, and person across tools organizations already run.
About IDENTOS
IDENTOS is Canada's leading identity, privacy and authorization company securing enterprise AI and enabling connected, citizen-facing digital services. Founded in 2014, pioneering access for sensitive enterprise systems in health and government. ISO 27001 and SOC 2 Type II certified with 100% Canadian data residency.
