IMO, some of them can be integrated into ApplicationStorage, but the others like customer specific policies should be placed out of system DB (e.g a xml file).