Your AI only sees what each person is allowed to see.
No copied data, no new permission model, no credentials handed to an assistant. Optialy inherits the controls your systems already enforce.
Every request runs as the person asking.
Any write needs explicit approval.
Kept in managed secret storage, encrypted at rest.
No warehouse copy. Caches are short-lived.
Zero-retention model terms supported.
Access ends the moment a login is disconnected.
External penetration test at least yearly.
No AI writes a number the user acts on.
Our beta users told us a correct answer is not enough. They need to see where each number came from, how current it is and how it was calculated. We rebuilt around that.
No copy is made. Optialy reads what a question needs, when it is asked.
No. Everyone sees only what their own login already allows.
Read-only by default. Any action needs a person to approve it first.
Code computes every figure and each one links to its source. Unclear fields get a question, not a guess.
The short answers.
Does Optialy copy our data into a warehouse?
No. Optialy reads each system where the data lives. Query results are cached for a bounded time only, and caches are kept separate from access decisions.
Can the AI assistant see our credentials?
No. Credentials are held in managed secret storage on our side and never passed to Copilot, Claude, ChatGPT or any other assistant.
Can Optialy change data in our systems?
Optialy is read-only by default. Writes are explicit, tied to a specific workflow, and run only after a person confirms.
Whose permissions apply?
The asking person's. Optialy checks the user's access and the connected source's access before use, so an assistant never reaches data that person couldn't.
What do model providers receive?
Bounded payloads, not your full tables. Zero-retention model-provider terms are supported.
Can we cut off access?
Yes. Disconnect a source and its access is revoked.
Is Optialy independently tested?
An external firm runs a penetration test at least annually, and vulnerabilities are fixed within set windows by severity.
Can we run Optialy privately?
Private deployment for regulated teams is designed and on our roadmap. Talk to us about your network and data-residency requirements.
Bring your security team in early. We will.
Start with one question that costs you money today. We'll answer it on your live data.