# Policies

The Digibee Integration Platform established processes on best practices and policy compliance that you can use for your platform governance, such as External and Internal API Keys, which are security standards used for API calls, allowing pipelines to be safely accessed.  With this solution, you can manage how your developers build, run, and monitor their integrations.&#x20;

The policies are divided into different topics, each with its own settings and characteristics. We also introduce new policies periodically based on the application integration market needs.

Centralizing the platform management is the key to building good governance for your business.&#x20;

## Policy scope

Our policies are applied to each pipeline deployed, taking into account its environment, be it test or production. Note that, when defining a policy, you must set values for all environments. It’s not possible to exclude one or more pipelines from any created policy.

When creating, editing, or removing a policy, a new policy version is created (the version increases with minor changes) and you have real-time access to the compliance and non-compliance numbers.&#x20;

All deployed pipelines must be redeployed to comply with the new Policy version.&#x20;

Since we work with containers and these containers are only created and updated during a deployment, it isn't possible to update the policies automatically.

You can't deploy a pipeline that isn't compliant, but there are cases where the policy came after deployment. For those cases, you can track the number of compliant and non-compliant pipelines.

## How to access the Policies page

Follow these steps to access the Policies page:

1. From the Platform home page, click **Administration** in the upper right corner of the page.
2. In the **Governance** menu, click **Policies**.

On the Policies page, you will see cards showing the number of deployments you have in each environment, as well as the number of deployments that are conformant or non-conformant with the policies. Click the card to see more details about the issues for each pipeline.

<figure><img src="/files/nABQIMjpdlrzNg8yC1wW" alt=""><figcaption></figcaption></figure>

Below the cards, you can configure each policy individually. The categories are available to identify the different types of policies and their impact.

Learn more about the configuration of each policy:

* [External API Keys](/documentation/developer-guide/platform-administration/governance/policies/security/external-api-access.md)
* [Internal API Keys](/documentation/developer-guide/platform-administration/governance/policies/security/internal-api-access.md)
* [Sensitive fields](/documentation/developer-guide/platform-administration/governance/policies/security/sensitive-fields.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.digibee.com/documentation/developer-guide/platform-administration/governance/policies.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
