> For the complete documentation index, see [llms.txt](https://www.analytics-docs.laplacetec.com/guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.analytics-docs.laplacetec.com/guide/en/mcp/security.md).

# Security and permissions

Here's what's worth checking before you connect company data to an AI.

## The AI can only see what the connecting person can see <a href="#permission" id="permission"></a>

* The AI uses **the Laplace permissions of the person who connected it, as is**. Dashboards or data sources you can't see in Laplace can't be queried by the AI either.
* An **API key** is tied to the membership of the person who issued it and connects to **only the one project** it was issued in.
* **Laplace account login** only queries within the projects the signed-in person belongs to.
* **Personal information** such as buyer names, emails, phone numbers, and addresses **is never returned.**

{% hint style="info" %}
If you want to give each team member a different scope, first set up permissions in the **Role** · **Dashboard permissions** · **Data source** tabs under Laplace **Settings** › **People & access** › **Access control**. The same permissions apply to MCP.
{% endhint %}

## Is it read-only? <a href="#write" id="write"></a>

Reading is the default, but on request **the AI can also make changes to data.** Again, only within the permissions of the person who connected it.

| Task              | Examples                                                         |
| ----------------- | ---------------------------------------------------------------- |
| Custom dashboards | Create, edit, delete                                             |
| Product matching  | Edit/delete option ↔ base product matches, refresh cost matching |
| Ad matching       | Edit/delete ad matches, create/edit matching rules               |
| Data management   | Create restore points                                            |
| Chart notes       | Add, edit, delete                                                |

{% hint style="warning" %}
Depending on your question, the AI may perform these tasks. If you don't want any changes, say "read only" when you ask, and if your AI tool offers per-tool permissions or confirm-before-run settings, use them as well.\
**Deleting chart notes can't be undone, and notes written by other team members are deleted too.** For details, see [Chart notes](/guide/en/customdashboard/custom/memo.md).
{% endhint %}

Chart notes follow custom dashboard permissions. For the difference between view and edit permissions, see [Chart notes](/guide/en/customdashboard/custom/memo.md).

## Where does the conversation go? <a href="#data-flow" id="data-flow"></a>

* Results the AI retrieves are passed into **the conversation in the AI service you use (Claude, ChatGPT, etc.)**. That conversation content is subject to the AI service's data policy.
* If your company has an AI service usage policy (whether data is used for training, team/enterprise plans, etc.), connect with an account that meets those standards.

## Checking usage <a href="#usage" id="usage"></a>

In **Settings** › **Developer** › **MCP usage**, you can check **Total calls**, **Active members**, and **Connected clients** by period, plus **Daily usage** per tool.

## Disconnecting <a href="#disconnect" id="disconnect"></a>

* **If you connected with Laplace account login:** Disconnect or remove Laplace Analytics in your AI's connector settings.
* **If you connected with an API key:** In **Settings** › **Developer** › **API key**, open the menu on that key's row and click **Revoke key**. Connections authenticated with that key are cut off immediately.

{% hint style="info" %}
We recommend issuing API keys with an expiry (30 days, 90 days, 1 year). If you issued a key with no expiry, replace it with a new key periodically.
{% endhint %}

## Ask your dedicated manager <a href="#contact" id="contact"></a>

Need more materials for your security review?

Contact us through the inquiry page below. Your account manager will guide you.

> 💬 [Contact us on our website](https://www.analytics.laplacetec.com/contact)

**Email:** [**product@laplacetec.com**](mailto:product@laplacetec.com)