As a result of NextLabs’ technologies, the solutions provided work seamlessly with enterprise IT and vast cloud infrastructures. When a user, device, or application attempts to access an application or data, the policy engine (PDP) enforces the policy written by administrators through the use of dynamic authorization, policy-based access control (PBAC), and enterprise digital rights management (E-DRM). 

At the heart of the NextLabs portfolio is our patented dynamic authorization and policy-based access control technology based on the zero trust policy engine. Dynamic authorization is a technology in which authorization and access rights to an organization’s network, applications, data, or other sensitive assets are granted dynamically in real-time using attribute-based rules and policies. The policies are supported by ACPL, a fourth-generation non-procedural language that allows users to create business-level policies in plain English, making it more accessible and easier to understand for those who may not have a technical background.

NextLabs’ products use a Zero Trust data-centric approach to dynamically enforce data security policies, protecting data whether it is at rest, in use, or on the move. Data is protected within applications as well as in structured and unstructured data stores by NextLabs’ dynamic authorization and real-time policy enforcement technology, allowing data access policies to be enforced at the time of access, wherever the data is being accessed. NextLabs’ policy engine uses policy-based access control and the principle of least privilege to evaluate and authorize access in real-time, based on user, device, resource, and contextual attributes at every access attempt.

The policy enforced is managed in the CloudAz zero trust policy platform, which provides a centralized system for administrators to author policies easily using the Policy Studio, a graphical editor for ACPL.  The policy platform allows organizations to efficiently manage and enforce security rules across data, applications, and documents, while also monitoring, tracking, and reporting any risky access activities.

Attributes from a variety of sources can be used with the zero trust policy platform to author policies. When an access attempt is made, the attributes of the user, device, or application are validated against the policy; if the attributes are aligned with the policy, the access attempt is granted. If the attributes are not aligned with the policy, the policy engine will deny access.