What IT approves before anything connects
One scoped connection, written down on a one-page review sheet before anything connects.
What IT approves
One scoped connection, between the AI tool one team already uses and your team's copy: a separate copy that holds only that team's material, kept apart by architecture, not by policy. Before anything connects, IT gets a one-page review sheet: what connects to what; what it may read and write; what it may send, and where; which credentials are issued and how they are revoked; where the copy runs, who operates it and how people sign in, as agreed with you; who can switch it off at any point and what stops; and the end date, the closing review and what is kept afterwards. The connection is authenticated and scoped to that copy. Those technical details go to your IT team on the sheet; they are not published on this site, so ask the team for the sheet.
The review sheet
| The review sheet covers | Written down before anything connects |
|---|---|
| What connects to what | The one AI tool your team uses, and your team's copy. Nothing else. |
| What it may read and write | The scope of the connection, stated before it is switched on. |
| What it may send, and where | What the connection may send out of your team's copy, and to where. |
| Credentials | Which credentials are issued for the connection, and how they are revoked. |
| Where it runs, who runs it | Where your team's copy runs, who operates it, and how people sign in, as agreed with you. |
| How to switch it off | Who can turn it off at any point in the trial, and what stops when they do. |
| When the trial ends | The end date, the review that closes it, and what is kept afterwards. |
Not published here
- deployment options and regions
- model-provider choice per tenant
- the full connector list and the authenticated tool surface
- single sign-on and role details
- retention settings
- pricing, customers, certifications and benchmarks
Not published is not the same as not available: ask the team. For each trust property, what to ask to see is on For a security reviewer.