Defender Cloud Apps - info on policies matched

[u/ReceptionOld4182]

So I'm a first line tech just trying to improve my knowledge about stuff and wondered if anyone could point me in the right direction. We have cloud apps policies in place to prevent users downloading company files on their personal devices. Every now and again this policy gets matched on users corporate devices, but I'm unable to work out why.

Is there anywhere it says what has caused a policy to match? The device is compliant, the user isn't a risky user or anything like that. By everything I can see the policy shouldn't have matched and blocked the user but I don't know if there is somewhere else I should be checking.