IDENTOS has made PolicyArc generally available, giving security, platform, and compliance teams a single place to define, enforce, and audit access policy across their applications. The solution is aimed at AI agents that act inside systems, pulling data and taking actions. Traditional access control was not built to give an agent just enough access, for just long enough, and nothing more.
PolicyArc lets people grant an AI agent a scoped, time-limited version of their own access, automatically revoked when the task or window ends. Access decisions combine standing facts such as a person's role and identity verification with real-time context like resource sensitivity and workflow stage. Consent is checked against what the data owner has agreed to on every request, not just at login. Policies are defined once per resource type and apply across connected applications, with updates in minutes and automatic audit logging.
The launch comes as AI-related breaches draw attention. According to IBM and Ponemon Institute's 2026 Cost of a Data Breach Report, 92% of organizations that experienced an AI-related breach lacked proper AI access controls. IDENTOS CTO Alec Laws said most systems only know how to grant broad, standing access, which is reckless for an agent, and that PolicyArc lets teams hand an agent exactly the permission it needs for one task, with access disappearing when the task ends and every decision on record.