Skip to main content
Conditions determine when specific actions (Allow, Block, Escalate) are triggered.

​
Condition Operators

The following operators are available for building conditions:
OperatorDescriptionExample
= or ==Equalsuser.risk_level == 'high'
!=Not equalsrequest.amount != 0
<Less thanrequest.amount < 1000
<=Less than or equalrequest.amount <= 1000
>Greater thanrequest.amount > 1000
>=Greater than or equalrequest.amount >= 1000
containsString containsuser.country contains 'US'
nullIs null/undefineduser.risk_level null
notNullIs not nulluser.risk_level notNull

​
Field Path Selection

Field paths reference data in the request payload:
  • Use dot notation: request.amount, user.country
  • Access nested objects: request.payment.method
  • Reference arrays: request.items[0].price
Common field paths:
  • request.amount - Request amount/value
  • request.currency - Currency code
  • user.id - User identifier
  • user.risk_level - User risk assessment
  • user.country - User’s country

​
Logical Operators

Combine multiple conditions:
  • AND (&&): All conditions must be true
  • OR (||): At least one condition must be true
Example: 
request.amount > 1000 && user.risk_level == 'high'

​
Parentheses Grouping

Use parentheses to control evaluation order: 
(request.amount > 1000 || request.amount < 0) && user.verified == true

​
Action Priority

When multiple conditions match, actions are prioritized:
  1. Block (highest priority) - If any block condition matches, the request is blocked
  2. Escalate - If block doesn’t match but escalate does, request is escalated
  3. Allow (lowest priority) - If neither block nor escalate match, allow condition is checked
Block conditions are always evaluated first, regardless of the order they appear in the policy.

​
Condition Expression Generation

Conditions are automatically converted to expressions:
  • The visual condition builder generates condition expressions
  • You can view the generated expression in the expression editor
  • Condition expressions are evaluated against request payloads
Example condition expression: 
request.amount > 1000 && user.risk_level == "high"

Policies: Conditions

Full guide to conditions (when to use, operators, SDK/API).

Policies

Create and edit policies in the UI.

Policy Simulation

Test your conditions