Enforcement points are locations in your application or infrastructure where access decisions are checked—such as controllers, middleware, or gateways. Oso helps standardize policy enforcement at these points for consistent protection across microservices.