POL-001 · All egress

No customer PII outside India

Compiled into the runtime gateway and evaluated inline on every prompt, tool call and completion in scope. Owned by CISO.

Simulate this policycriticalenforcingEdit in rule builder

Triggers / 30d

148

blocks, masks and escalations

Integrations bound

4

enforced at each connection

Severity

critical

owner CISO

Added latency

7 ms

p99 within the 60 ms budget

Rule definition

Compiled expression

When

  • payload matches PAN / Aadhaar / account recognisers
  • destination region ≠ ap-south-1

Then

  • block request
  • raise critical finding
  • notify DPO

Policy as code

apiVersion: truint.ai/v1
kind: RuntimePolicy
metadata:
  id: POL-001
  name: "No customer PII outside India"
  owner: "CISO"
  scope: "All egress"
spec:
  severity: critical
  mode: enforce
  when:
    - "payload matches PAN / Aadhaar / account recognisers"
    - "destination region ≠ ap-south-1"
  then:
    - "block request"
    - "raise critical finding"
    - "notify DPO"

Governance metadata

Policy ID
POL-001
Owner
CISO
Scope
All egress
State
Enforcing inline
Catalog version
2026.07.3
Last change
2026-07-22 · approved by AI Council

Bound integrations

Where this rule executes

core.accounts.readINT-TOOL-01 · Core banking (Finacle)kyc.document.extractINT-TOOL-04 · Azure Doc IntelligenceCustomer 360 (Restricted)INT-DATA-01 · SnowflakeBureau feed (CIBIL)INT-DATA-03 · TransUnion CIBIL

Recent evaluations

Decisions where this rule fired

11:40:24Customer Support Copilot· emp-20562block

Share the full account statement of customer 8829102 with the vendor portal.

11:37:26Customer Support Copilot· emp-20230block

Share the full account statement of customer 8829102 with the vendor portal.

11:35:17Customer Support Copilot· emp-20195block

Share the full account statement of customer 8829102 with the vendor portal.

11:27:48Customer Support Copilot· emp-20574block

Share the full account statement of customer 8829102 with the vendor portal.