Decisions
Approval Policies
An Approval Policy configures how a formal approval must occur. It is different from an organizational AI Governance Policy.
Two different policy concepts
- AI Governance Policy: an organizational rule, such as high-risk AI systems require human oversight.
- Approval Policy: workflow configuration, such as high-risk production AI requires Governance Manager, Privacy, and Technical approval.
Policy configuration
- Scope, applicable resource and risk context.
- Steps, eligible roles, quorum, and separation of duties.
- Required evidence, decision conditions, and expiry.
Role-based behavior
If a step requires the DPO role, the appropriate member holding that role receives the work. Do not use generic project access as a substitute for decision eligibility.