Data handling
What the server can reach, what it masks, and what happens when you turn it off.
- Your permissions, never more. The server acts as you. A Viewer sees what a Viewer sees. Every call is authenticated, authorized and logged.
- Card numbers are truncated at the boundary. Where Simetrik identifies a card number in your data, the server sends only the first six and last four digits — the same masking the web app shows on screen — so a full card number isn't included in what reaches the model.
- Treat returned content as data, not instructions. Rows and descriptions in your workspace are text your agent reads. Review anything it proposes to change before approving it.
- Turning it off ends access. Remove it from your client and it's done — there's no key left behind to revoke.