Data routing policy
Owners and admins open Policies to decide which execution environments may receive each sensitivity level.
The D×E matrix uses Allowed/Blocked controls. Review your draft, then save it. Changes take effect after saving and appear in Change history; leaving with unsaved changes offers save/discard protection.
Request evaluation
The effective data sensitivity combines the API key’s default/floor with any request declaration. A request can raise its sensitivity; it cannot lower a key floor. The selected connection’s environment must also meet the key’s minimum environment.
Steinkauz checks the policy and records required evidence before sending input to the provider. Denied requests do not reach the provider. Requests also fail if required evidence cannot be recorded.
Sensitivity and environment labels are customer assertions, not automatic content classification, provider certification or legal advice. Assign environments based on your actual provider/deployment agreements.