Create a policy

Policies are the rules Shield enforces in the browser: what may happen, with which data, on which AI tools. You can get started in seconds using a compliance preset — or build your own in a couple of minutes.

Create the policy

When you select New policy, you have two options:

Option 1: Start from a preset

1. Select From preset.
2. Choose from available presets — Shield includes starter bundles for EU AI Act and GDPR, or any other presets your administrator has created.
3. Review the preset's configurations (data types, actions, and enforcement modes), and adjust if needed.
4. Select Create policy to apply it.

Presets let you adopt proven policy configurations instantly, without building from scratch.

Option 2: Create from scratch

1. Open Policies and select New policy, then Create from scratch.
2. Choose what it applies to: All tools, or Specific tools picked from the AI tools discovered in your organization. Tool-specific policies stack on top of general ones — on conflict, the stricter action wins.
3. Select the data types the policy covers — for example PII, financial data, source code, or secrets and credentials. See data types & detection.
4. Select the actions it governs: submit prompt, upload file, copy/paste, download, share.
5. Pick the enforcement mode — from observe-only to a full block. See enforcement modes explained.
6. Name and description are pre-filled from your selection; adjust them and select Create policy.

For a tool you want gone entirely, use Block entire tool — it blocks all use of that tool, and data types and actions no longer matter.

Manage the lifecycle

Policies are Active or Paused — pause instead of deleting when you want to try something out. Select multiple policies in the list to enable, pause, or delete them in one step — deleting asks for confirmation and is limited to admins. Every edit increments the policy's version number, so audits can trace exactly which revision was in force.

What your team sees

Active policies show up for members in the Shield Web side panel under Policies, and enforcement happens directly in the browser on the next page load of the affected AI tools.