# Policy Engine

> A runtime component that evaluates access requests against declared policies and returns permit or deny decisions.

Record: `lexicon:policy-engine`
Kind: mechanism
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-policy-engine

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Mitigation](https://banes-lab.com/records/lexicon/mitigation.md) and before [Query Parameter Binding](https://banes-lab.com/records/lexicon/query-parameter-binding.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Required by

- [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)