diff --git a/src/BuildingBlocks/Security/Authorization/IAuthorizationEvaluator.cs b/src/BuildingBlocks/Security/Authorization/IAuthorizationEvaluator.cs
new file mode 100644
index 0000000..09a5fb2
--- /dev/null
+++ b/src/BuildingBlocks/Security/Authorization/IAuthorizationEvaluator.cs
@@ -0,0 +1,16 @@
+namespace OpenHealthOS.Security.Authorization;
+
+using OpenHealthOS.Contracts.Authorization;
+
+/// <summary>
+/// Evaluates whether an authorization request is allowed.
+/// </summary>
+public interface IAuthorizationEvaluator
+{
+    /// <summary>
+    /// Evaluates the specified authorization context.
+    /// </summary>
+    /// <param name="context">The authorization context to evaluate.</param>
+    /// <returns>The authorization decision.</returns>
+    AuthorizationDecision Evaluate(AuthorizationContextDto context);
+}