IDENTOS makes PolicyArc generally available for AI agent access
Original title: IDENTOS PolicyArc gives AI agents task-specific, time-limited access
Agents can receive a scoped, time-limited copy of a person's access that ends when the task or window ends.
IDENTOS announced general availability of PolicyArc, a product for defining, enforcing, and auditing access policy, including for AI agents acting on a user's behalf. People can grant an agent a scoped, time-limited version of their own access that is revoked when the task or window ends. Decisions also check data-owner consent on every request and combine role and identity facts with real-time context. IDENTOS says every decision is logged.
Unconfirmed: The 92% figure is from IBM and Ponemon's 2026 report, not from IDENTOS customer measurements.
- IDENTOS cites more than 12 years of identity work in Canadian government and healthcare.
- IBM and Ponemon's 2026 report is quoted as saying 92% of organizations with an AI-related breach lacked proper AI access controls.
- One resource-type policy is meant to apply across connected applications without rewriting integrations.
- Alec Laws, IDENTOS CTO, said access should disappear when the agent's task ends.
- Vendors
- IDENTOS
- Products
- PolicyArc
- Organizations
- IBMPonemon Institute
- Countries
- Canada
From the original article
2 min read at helpnetsecurity.comIDENTOS has announced that PolicyArc is now generally available. The new solution gives security, platform, and compliance teams a single place to define, enforce, and audit access policy across their applications. PolicyArc is built to solve how to safely extend access not just to people and services but to the AI agents now acting on their behalf.
By Industry News · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.