IDENTOS Launches PolicyArc, Bringing Real-Time, AI-Ready Access Control to the Enterprise

TORONTO--(BUSINESS WIRE)--Oct 20, 2026--

IDENTOS, a leading Canadian identity, privacy, and authorization company, today announced that PolicyArc is now generally available. The new solution gives security, platform, and compliance teams a single place to define, enforce, and audit access policy across their applications. PolicyArc is built to solve one of the fastest-moving problems in enterprise software: how to safely extend access not just to people and services but to the AI agents now acting on their behalf.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261020424217/en/

PolicyArc builds on more than 12 years of IDENTOS identity and access work across Canadian government and healthcare systems.

Why now

Companies are adopting AI agents that act inside their systems, pulling data, taking actions, and making decisions. Traditional access control wasn’t built to give an agent just enough access, for just long enough, and nothing more. According to IBM and Ponemon Institute's 2026 Cost of a Data Breach Report, 92% of organizations that experienced an AI-related breach lacked proper AI access controls. PolicyArc is designed to address that risk, along with a more familiar challenge: access policies that are slow to change and difficult to audit.

What PolicyArc does

Who it's for

PolicyArc is built for the teams who own access decisions and have to answer for them: platform and security engineering leads managing authorization across a growing product surface, compliance and risk leaders who need to prove access was appropriate, and teams shipping AI-agent features who need a safe way to delegate access without building that infrastructure themselves.

Quotes

"Today marks a natural evolution for IDENTOS in the era of AI. PolicyArc takes everything we've learned about access and identity and applies it to the question every enterprise is now asking: how to adopt AI without losing control." - Mike Cook, CEO, IDENTOS

"Most systems only know how to grant broad, standing access. That's fine for a person, but reckless for an agent. We built PolicyArc so a team can hand an agent exactly the permission it needs for one task, nothing more. When the task ends, the access disappears, and every decision is on record." - Alec Laws, CTO, IDENTOS

Availability

PolicyArc is generally available now: https://policyarc.com/

About PolicyArc
PolicyArc, powered by IDENTOS, is the authorization layer for enterprises. It decides, enforces, and proves every access decision, so that security teams can adopt AI with accountability built in. Designed for every AI agent, service, and person across the tools organizations already run. Learn more at policyarc.com.

About IDENTOS
IDENTOS is Canada’s leading identity, privacy and authorization company securing enterprise AI and enabling connected, citizen-facing digital services. Founded in 2014, the company has spent over a decade pioneering access for sensitive enterprise systems, differentiating itself in some of the most complex and regulated sectors, such as health and government, where reliable access control is fundamental to delivering critical services. IDENTOS is ISO 27001 and SOC 2 Type II certified, with all products built on 100% Canadian data residency. IDENTOS's core product is PolicyArc, a policy-based access control platform. For more information, visit identos.com.

Follow IDENTOS on LinkedIn: linkedin.com/company/identos-inc

Media assets, including logos, images and executive headshots, are available through this link.

IDENTOS introduces PolicyArc, giving enterprises one place to define, enforce and audit access for every person, service and AI agent across their applications.

WASHINGTON (AP) — Beijing on Tuesday expressed “firm opposition” to the Trump administration’s sanctions on five Chinese companies connected to a former Google engineer accused of intellectual property theft.

The move “severely harms the legitimate rights and interests” of Chinese businesses, the country’s commerce ministry said in a statement. “The nature of this act is egregious. China firms opposes this.”

The ministry also urged the U.S. to "correct its erroneous practice” and said Beijing would take “necessary measures,” without specifying them.

It came a day after the U.S. State Department imposed sanctions on five Chinese companies connected to Linwei Ding, who founded Shanghai Zhisuan Technology. The department said he had touted his experience with Google and claimed his company could replicate the American tech giant’s super intelligence infrastructure technology.

The startup incubation program MiraclePlus, which was sanctioned along with Zhisuan, gave seed capital in exchange for an ownership stake in Zhisuan, the State Department said. The other three Chinese entities facing penalties are linked to MiraclePlus.

Zhisuan “has knowingly engaged in, or benefitted from, significant theft of trade secrets of United States persons, which occurred on or after January 5, 2023,” the State Department said.

Ding was charged in 2024 with stealing artificial intelligence trade secrets from Google while secretly working with two companies based in China. In January, he was convicted by a federal jury in San Francisco of several counts of economic espionage and theft of trade secrets.

A judge later dismissed the economic espionage charges and sentenced him to 12 months in prison. The Justice Department is appealing the dismissal of the economic espionage charges.

China’s commerce ministry said its AI development is “the result of long-term cultivation in basic research, continuous innovation investment, and adherence to independent scientific and technological innovation and open cooperation.”

The country's achievements have “nothing to do with the so-called ‘stealing of trade secrets,’” the ministry said.

Associated Press writer Eric Tucker contributed to this report.

FILE - The U.S. and Chinese flag at the Great Hall of the People on May 14, 2026, in Beijing. (AP Photo/Mark Schiefelbein, File)

FILE - In this May 1, 2019, file photo a man walks past a Google sign outside with a span of the Bay Bridge at rear in San Francisco. (AP Photo/Jeff Chiu, File)