Skip to content

EntiHub Documentation

Policy & Compliance Catalog

Policy & Compliance Catalog

Broader than regulatory frameworks: internal policies that pipelines and AI must respect (retention, export regions, PII handling).

Why this is needed

DLP and pipelines need a machine-readable policy surface.
Time-travel answers which policy applied when data left the tenant.
Complements Regulatory Obligation Registry with operational policy.

Proposed entities in EntiHub

Governance settings

Setting	Recommended value	Why
`approvalRequired`	`true`	Policy edits are controlled changes.
`historyEnabled`	`true`	What policy applied at export time.
`allowSameAuthorApproval`	`false`	Maker/checker separation for sensitive changes.
`deletedRetentionDays`	`90` (or higher)	Soft-delete retention for auditability.

Entity definition (YAML sketch)

name: internal_policy
displayName: Internal policy
domain: Compliance
description: Internal policy
version: "1.0.0"
approvalRequired: true
historyEnabled: true
deletedRetentionDays: 90
displayRefColumn: policy_code
uniqueConstraints:
  - name: uq_internal_policy_policy_code
    columns: [policy_code]
columns:
  - name: policy_code
    dataType: string
    nullable: false
    maxLength: 64
  - name: title
    dataType: string
    nullable: false
    maxLength: 256
  - name: policy_type
    dataType: string
    nullable: false
    maxLength: 32
  - name: rule_summary
    dataType: string
    nullable: false
    maxLength: 2000
  - name: owner_team
    dataType: string
    nullable: false
    maxLength: 128
  - name: effective_from
    dataType: date
    nullable: false
  - name: status
    dataType: string
    nullable: false
    maxLength: 16

YAML sketches

Sketches highlight the important fields and governance flags. Trim or extend columns to match your domain. See Setup Entity for the full YAML reference.

Sample data

policy_code	title	policy_type	rule_summary	owner_team	effective_from	status
POL-PII-EXPORT	PII export restriction	PII	No raw PII outside EU without Legal approval	Privacy	2026-01-01	active
POL-RET-FIN	Finance retention	Retention	Finance docs retain 10 years	Finance	2025-01-01	active

Benefits for the company

Pipelines and agents share one policy source.
Export/region rules become explicit.
Audit can prove which policy was live.