How we keep AI access safe
Every MCP server and gateway we build follows the same rules.
- Read-only by defaultAssistants can look things up before they can change anything.
- Least accessEach assistant gets only the access it needs, tied to the person using it.
- Signs in as you on FabricOn Microsoft Fabric, AI requests run under your own identity, so Fabric's permissions, row security, and masking apply.
- Approval for changesActions that create or update records need an approval step.
- Everything loggedEvery tool call is recorded, so you can see who asked for what and when.
- Your servers, if you preferSensitive data can stay on your own servers instead of the cloud.
- No copies on our sideYour data is never copied to our systems.
Every MCP server and gateway passes a security review before it goes live.