Systems and processes for managing and applying data classification labels are provided. In a method for managing data classification labels, a request may be received from a client application to fetch data classification labels from a policy server. Authentication information may be retrieved and passed to the policy server, and an access token may be received from the policy server based on a rights check performed using the authentication information. The access token may be provided to an interface for the policy server for use in generating a request for a list of data classification labels accessible via the access token, and the list of data classification labels may be received. Output data usable by the client application to generate a presentation of the list of data classification labels for selection by a user of the client application to classify data managed by the client application may be generated.