Skip to content

Security & Trust

What crosses the boundary

When your assistant answers a question, only the structured arguments of a tool call reach Dotlas: a brand identifier, a country code, a search keyword, and similar. The rest of your conversation stays with you and your AI client. Dotlas never receives the chat.

flowchart LR
    subgraph yourside["Your side"]
        U[You]
        LLM[AI assistant]
        C[[Full conversation]]
    end
    subgraph dotlas["Dotlas"]
        MCP[Dotlas MCP]
        DB[(Restaurant data)]
    end
    U <--> LLM
    C -.->|never sent| MCP
    LLM -->|"structured arguments only"| MCP
    MCP -->|"read-only results"| LLM
    MCP --> DB

Stated precisely

A keyword you type can travel inside a tool argument, for example a brand name you asked about. So the accurate statement is that Dotlas receives only the structured arguments a tool needs, never the full conversation.

Read-only by design

Every Dotlas tool is a query. Connecting the MCP grants read access to Dotlas data and nothing more.

  • No writes

    The tools cannot create, change, or delete any data, on your side or ours.

  • No irreversible actions

    There are no destructive operations in the toolset. Nothing to undo.

  • No access to your systems

    The server cannot execute code or reach into your files, network, or applications.

Scoped to your organization

Every query is scoped to the organization you select at sign-in. You only ever see the markets and brands your organization is licensed for. One organization cannot see another's data.

Authentication

Access uses OAuth. You sign in through your identity provider and select an organization. The server requests least-privilege scopes: your profile, your email, and the ability to read your organization membership so it can scope your data. Requests that are not signed in, or that do not select an organization, are rejected.

Questions from a security review

Can it change or delete our data?

No. Every tool is read-only. There are no write, update, or delete operations.

Does Dotlas see our whole conversation?

No. Only the structured arguments of a tool call reach Dotlas, never the surrounding chat.

Can it access our internal systems?

No. The server answers data queries. It cannot execute code or reach your files, network, or applications.

Who in our organization can connect?

Any member of an enabled organization who signs in and selects that organization. If your organization is not enabled, contact us.

How are queries logged or retained, and where is data hosted?

For specifics on logging, retention, and hosting suitable for a formal review, contact us and we will share the current details.

Next

Ready to set it up? See Connect a client, or browse what you can ask.