There's also a whole compliance API, allowing automated policy enforcement (see https://www.anthropic.com/news/claude-code-on-team-and-enter...).

And then there's the growing field of 3rd party policy-as-code tooling available which can also do stuff like this.