> ## Documentation Index
> Fetch the complete documentation index at: https://docs.anchorage.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Policies overview

> Configure vault policies, manage rules, and set up quorum approvals.

Policies define the approval requirements for operations across your organization. Rules within a policy act as safety checks: when a specific action (the trigger) occurs, the rule determines who must approve it and how many approvals are needed.

Rules operate at two levels:

* **Admin policy** — Applies to organization-wide operations such as inviting users.
* **Vault policies** — Applies to asset-specific operations in vaults the policy is assigned to, such as withdrawing funds.

When a rule is triggered, the required administrators receive a notification to review the request. Once the necessary quorum is met, Anchorage Digital performs a final review of the operation.

To add, edit, or delete rules and configure their quorums and sub-quorums, see [Rules](/knowledge-base/platform/users/rules).

## Managing policies on iOS

You can view and edit vault policies directly from the Anchorage Digital iOS app under the vault settings.

## Conditional rules

<Info>
  Conditional rules are in development and not yet generally available. They will be available in the iOS app and web dashboard first, and are not part of the API at initial release.
</Info>

Today, a rule applies one quorum to every instance of an operation type. Conditional rules will let you vary the approvals required based on the attributes of a specific operation. Planned capabilities include:

* **Trusted destination conditions** — require fewer approvals for withdrawals to a trusted destination, or block withdrawals to any address that isn't a trusted destination.
* **Amount thresholds** — set different approval requirements by transaction amount directly within a rule.
* **Self-serve IP allowlist** — manage the [IP allowlist](/knowledge-base/platform/users/web-dashboard/settings#ip-allowlist) yourself, without contacting Anchorage Digital.