Policy Metadata

When AI is enabled for a tenant, Thales can automatically enrich Policy metadata to improve clarity, governance, and compliance visibility. This enrichment is based on the Policy’s ruleset, conditions, resources, actions, and contextual attributes.

AI focuses on generating metadata only, it does not alter enforcement logic.

Generating Policy Data

AI enriches the following Policy metadata fields:

• Policy description A natural-language explanation of the Policy’s intent, scope, and enforcement behavior.

• Regulatory tags Tags that indicate potential alignment with regulatory or compliance domains (for example, GDPR or HIPAA), inferred from the Policy definition.

These metadata elements improve policy discoverability, simplify long-term maintenance, and support faster audits and reviews.

When AI Metadata Is Generated

AI-based metadata enrichment is applied automatically only when relevant fields are empty:

• During Policy creation via the UI, Policy as Code, or during Discovery.
• When a Policy is created without a description or regulatory tags.

If a metadata field already contains user-defined values, AI does not overwrite them. Tenant-defined metadata always takes precedence.

Editing and Regenerating Metadata

AI-generated metadata behaves the same as manually entered content.

• Users can edit, refine, or fully replace generated descriptions and regulatory tags.
• Once edited, a field is treated as user-defined and is no longer updated automatically.
• Users can explicitly regenerate metadata at any time.

During regeneration, AI analyzes the current Policy definition and updates only the selected fields, ensuring precise control over what is replaced.

To generate or regenerate AI metadata for a Policy:

1. In the Authorization Workspace, open the relevant Policy.
2. Navigate to Details and click Edit.

3. In the Description or Regulatory Tags field:

4. Leave the field empty to allow automatic generation, or

5. Clear the existing value to trigger regeneration, or
6. Click the blue AI icon next to the field.
7. Review the generated content and adjust it as needed.
8. Save the Policy.

For more information about these fields, refer to Policy Custom Attributes.

References and Traceability

AI-generated metadata is derived directly from the Policy ruleset, including conditions, resources, actions, and contextual attributes. This ensures generated descriptions and regulatory tags remain aligned with actual enforcement logic and are explainable for governance, compliance, and audit scenarios.