> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corvic.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Policies

> Limit which models and connectors rooms may use, and who can open public app links.

Policies decide which models and connectors rooms may use. The organization policy applies everywhere; a room policy narrows it for one room, where the organization allows that. Policies are enforced by default.

## Organization policy

Admins set it under [**Settings → Policy**](https://app.corvic.ai/settings/policy).

| Setting | Options |
| - | - |
| **Models** | **All models**, or **Only selected models** |
| **Connectors** | **All connectors**, or **Only selected connectors**. The in-process embedder runs inside Corvic and is always allowed. |
| **Public app links** | **Anyone with a public link**, **Only people signed in**, or **Only members of the organization** |
| **Rooms which may override the organization policy** | **All rooms**, **No rooms**, or **Only selected rooms** |

Without an organization policy, every model and connector is allowed, public app links accept visitors, and rooms may set their own policy.

## Room policy

Open a room's **Room policy** to set the connectors and models that room may use. Only people who can edit the room can change its policy, and only in rooms the organization policy lets override it.

## API keys and runs

A run or an API key can use a connector only when it has been given explicit access to it. Calls to the [model gateway](https://docs.corvic.ai/models/api-playground.md) follow the organization policy, or a room's policy when the call names a room.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.