What happened
On Oct 20, 2026 IDENTOS announced general availability of PolicyArc, a policy-based access-control platform giving teams one place to define, enforce and audit access for people, services and AI agents. It lets users grant an AI agent a scoped, time-limited version of their own access that auto-revokes when the task ends, enforces consent on every request, and logs every access decision by default.
Why it matters
It addresses a concrete gap surfaced by the IBM/Ponemon 2026 breach report (92% of AI-related breach victims lacked proper AI access controls): delegating fine-grained, expiring, auditable access to agents rather than broad standing credentials.
Applicability
Platform/security engineering leads and compliance teams shipping AI-agent features should evaluate PolicyArc where they need scoped, time-boxed, auditable agent access; its Canadian gov/healthcare heritage makes it relevant for regulated sectors.