October Enhancement - Introducing AI For PMaaS

Our October enhancement release of Policy Management as a Service (PMaaS) is focussed on allowing AI assistants to connect to the contents of PMaaS using MCP (Model Context Protocol), an open standard that AI assistants use to connect to external systems. This enhancement means customers can add "our policy system" as a connection inside Microsoft Copilot and Claude assistant, sign in with their PMaaS account, and ask questions of their own policy content - with the answers grounded in what's actually in PMaaS, and linking back to the PMaaS pages.

The first iteration will cover the User content.

List and retrieve policies
An AI assistant, if prompted, can deliver a list of the policies the user's organisation has deployed and retrieve a specific policy by number or title plus the link to it in PMaaS. The user will only be able to view content visible to them, using the same visibility rules as available within PMaaS.

Retrieve a full policy or specific statement
Retrieve a specific section or sub-section of a policy - the statement, its explanation and the link.

Keyword search
Search across the organisation's User content using prompts which will return matching statements with their policy and a link to each.

Export Search Results
The search page includes some very useful client-side search/filter/sort functionality. An extension of the search function makes it easy to export search results to CSV.

Authentication
PMaaS can be configured to support the following connection option from an AI assistant:

• Sign in with a PMaaS account (OAuth) - the user adds the PMaaS connection, is sent to a PMaaS page to sign in and approve the connection, and is sent back, with no tokens to copy. Where a customer uses SAML single sign-on, that continues to apply.

Connecting AI assistants
Primary Users (Administrators) for PMaaS have the ability to enable access from AI assistants to the user content in the service.

User Activity Log
PMaaS will record every AI request in the User Activity log - the user, the capability used and what was asked - so AI access appears in the same activity report and page-view counts as web access.

Contact our policy experts if you would like obtain more details on this release.