How does the Siberson Veriket Data Classification policy engine work?

Policies are the governance core of Siberson Veriket Data Classification. They translate corporate data handling requirements and compliance obligations into enforceable classification rules that operate automatically across the organization's document estate:

• Policy categories and taxonomy: Policies are organized into structured categories — for example, Privacy, Finance, PCI, Legal, Intellectual Property — enabling clear ownership assignment, simplified reporting, and efficient governance at scale
• Targeted application: Policies define precisely who and what they apply to — specific users, user groups, organizational units, endpoints, or asset classes — ensuring controls are proportionate to actual risk context
• Region-aware enforcement: Policies can be constrained by jurisdiction or region validity — a policy applying GDPR-specific classification rules activates only for users and data within EU boundaries, while a KVKK policy applies to Turkish operations — enabling a single platform to manage multi-jurisdictional obligations simultaneously
• Classification outcome mapping: Each policy maps to defined classification levels, ensuring detection events produce consistent labeling outcomes regardless of which user, endpoint, or document triggered the policy
• Sensitivity context: Policies can carry sensitivity intent attributes (e.g., "personal data," "special categories of personal data") that support downstream compliance reporting
• Lifecycle management: Policies can be enabled, disabled, versioned, and audited — maintaining operational consistency at scale without accumulating configuration debt

Last updated: 2026-04-12