Overview

Immuta's Policy Entitlement Engine centralizes and automates data access policy enforcement across multiple platforms—Snowflake, Databricks, AWS, Azure, BigQuery, Starburst—using attribute-based access control. It empowers both technical and non-technical stakeholders to author dynamic policies in natural language or code that work consistently across cloud services, with real-time enforcement, unified auditing, and compliance capabilities.

Features and Capabilities

• **Natural-language policy authoring: **Intuitive editor enables non-technical users to define policies without scripting.
• **Cross-platform native enforcement: **Policies and entitlements enforced directly on target platforms for performance and consistency.
• **Attribute-based dynamic policy engine: **Combines user, data, and metadata attributes to replace rigid RBAC with flexible ABAC policies.
• **Metadata registry integration: **Aggregates data source, schema, classification, and identity metadata for policy logic.
• **Automated data discovery & classification: **Detects new or updated datasets; classifies sensitive fields to apply policies automatically.
• **Unified audit and reporting: **Centralizes logs and access metadata across domains for compliance and analytics.
• **Data domains and delegation: **Enables local data stewards to manage domain-level policies under enterprise guardrails.
• **Scalable and dynamic: **Policies authored once cascade dynamically across tables, pipelines, regions, and clouds.