First, an authorized user requests permission for an app to run on sensitive data,
which is retrieved as a DataSafe package. The DataSafe policy handler is a flexible software component that supports arbitrary security policies expressed in a high-level language, such as XML.
It performs initial access control checking and, if access is authorized, translates the high-level usage policy into low-level hardware tags.