OpenPMF centrally stores policy models that are automatically turned into technical access control and audit rules, which are then consistently enforced for all applications which are protected by an OpenPMF policy enforcement point (PEP).