gdpr-ccpa
100 Dtwo policies tagged "gdpr-ccpa", including Airtable: Redact PII in Record Reads, Asana: Redact PII in Task & Comment Reads. Browse by what the control does rather than which app it targets.
On this page
Airtable
Airtable: Redact PII in Record ReadsScans the responses of the Airtable record-read tools — the calls that return row fields values — and rewrites high-confidence PII shapes to a fixed…Clamp Bulk Airtable Record ReadsAirtable bases routinely hold CRM contacts, applicant-tracking pipelines, customer/financial trackers, and — on HIPAA-eligible Enterprise plans — health-ops…Confine Airtable Agent to Allowlisted BasesAn Airtable OAuth grant (or Personal Access Token) with the workspacesAndBases:read scope spans the entire workspace — every base the connected identity can…
Asana
Asana: Redact PII in Task & Comment ReadsOn the Asana MCP read path, this transform scans the free-text business fields that ride back in task, comment/story, and status-update responses — notes,…Fence Writes to Sensitive Asana ProjectsAsana is routinely used for HR (hiring, performance, offboarding), legal, M&A, and incident work; those project bodies, comments, custom fields, and status…
BigQuery
BigQuery: Redact PII in Query ResultsScans the content returned by BigQuery's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…Block BigQuery Exfiltration and Cross-Project WritesInspects the raw GoogleSQL string carried by BigQuery SQL tools and denies any statement that moves data out of the tenant's own project — even when the call…Fence Regulated BigQuery Datasets by GroupFences customer-designated regulated BigQuery data domains by data-domain IdP group, at ingress, before any statement or metadata lookup reaches BigQuery.
Box
Box: Redact PII from File Content on EgressScans the responses of Box content-returning tools and rewrites personally identifiable information to fixed redaction tokens before the response reaches the…Box: Role-Gated Writes (Read-Only Default)Makes Box read-only by default on the MCP path.Fence Sensitive Box Folders by IdP GroupFences pinned sensitive Box subtrees (HR, Finance, Legal, …) by ID.Guard Box Share Links and External CollaborationsBlocks the externally-visible Box sharing surface — the riskiest Box surface an agent can touch — before the call ever reaches Box:
Confluence
Confluence: Deny Org-Wide & Public PublicationStops a prompt-injected or erring agent from broadcasting Confluence content org-wide or to anonymous external readers.Confluence: Redact PII from Page & Comment ResponsesScans the responses of Confluence page, comment, and search read tools and rewrites personally identifiable information to fixed redaction tokens before the…Fence Confluence Reads & Search to Non-Restricted SpacesFences a configurable set of restricted Confluence spaces (placeholder keys: HR, LEGAL, SEC) out of the agent's read and search paths unless the caller's IdP…
Databricks
Databricks: Mask Cardholder PANs in ResponsesMasks payment-card numbers (PANs) in Databricks tool responses before the agent receives them.Databricks: Redact PII in Tool ResponsesScans the response payloads of the Databricks MCP tools that carry lakehouse data back to the agent and rewrites personally identifiable information to fixed…Fence Sensitive Databricks SchemasFences off the most sensitive lakehouse namespaces from agents on the read side of Databricks.
DocuSign
Cap Docusign Directory and Document EgressBounds the two largest data-out channels in the Docusign MCP landscape:Docusign: Redact SSN, Bank & Card Values on EgressScans the responses of Docusign envelope- and agreement-reading tools and rewrites high-confidence regulated identifiers before the response reaches the…Guard Docusign External RecipientsBlocks Docusign envelope-creation and recipient-update tool calls when any recipient email address has a domain outside the configured counterparty allowlist.
Dropbox
Block Public Dropbox Share, Download, and File-Request LinksDenies, by default, the Dropbox tools that turn an internal file into an internet-visible resource in a single call — before the request ever reaches Dropbox:Dropbox: Redact PII, PANs, and Secrets in File ContentScans the responses of the Dropbox file-content read tools and sanitises the returned text before it reaches the agent.Fence Sensitive Dropbox Paths by TeamFences protected Dropbox subtrees by path prefix . Dropbox addresses files and folders by a root-relative path (/Finance/2026/payroll.Role-Gate Dropbox Writes to the Writers GroupEstablishes the per-app least-privilege write floor for Dropbox.
Glean
Cap Glean Bulk Search ExportClamps the bulk-export parameters on Glean search calls before they reach the Glean MCP server, so a single agent request cannot pull an entire indexed…Fence Glean Search by DatasourceGlean's search tool fans out across every system the tenant has indexed (Drive, Confluence, Slack, Jira, Gmail/Outlook, GitHub, Salesforce, Gong, HR…Glean: Redact PII from Read-Tool ResponsesScans the responses of Glean's content-returning read tools and rewrites high-confidence PII to fixed redaction tokens before the response reaches the…
Gmail
Deny Agent Email Sends to External RecipientsDenies Gmail send-class tool calls when any recipient in to, cc, or bcc falls outside a documented corporate-domain allowlist.Gmail Cap Bulk ExportThrottles mass-harvesting of a mailbox by capping the per-call blast radius of the two Gmail MCP surfaces that return many full email bodies at once:Gmail: Role-Gated Writes (Read-Only Default)Makes Gmail read-only by default on the MCP path. Verified read tools pass for everyone.Mask Card Numbers in Email Content Read by AgentsMasks payment-card-number (PAN) shapes in email content returned to agents by Gmail mailbox-read tools.
Google Calendar
Block Calendar Invites to External AttendeesDenies Google Calendar event-write tool calls — create event / create-event, update event / update-event, and the consolidated manage event — whenever any…Block Public Visibility & Guest DelegationBlocks Google Calendar create and update event calls that would expose the event to the world or hand control of it to guests.Redact Attendee PII and Meeting Links in Calendar ReadsScrubs sensitive fields from the responses of Google Calendar read tools before they reach the agent, for callers who lack the placeholder calendar-full-read…
Google Drive
Cap Google Drive Search & Listing Page SizesClamps the page size of Google Drive search and listing calls to a documented cap (25 results per call).Fence Restricted Google Drive Files and FoldersFences an admin-maintained denylist of restricted Google Drive file and folder IDs — HR records, M&A deal rooms, board packs, payroll — off the agent channel:Gate Google Drive Writes to an Authorized IdP GroupBaseline least-privilege policy for Google Drive MCP traffic.Google Drive: Redact PII from File ContentScans the responses of the content-returning Google Drive tools — file reads, downloads, and Docs/Sheets/Slides content fetches — and rewrites personally…
Gusto
Fence Gusto Compensation & Payroll ReadsDenies the highest-sensitivity Gusto read tools unless the caller's IdP-asserted groups include the placeholder group hr-payroll-admins.Gusto Cap Roster ExportThrottles full-roster exfiltration on Gusto's two broad outbound list tools — list company employees and list company contractors — by rewriting their…Gusto: Redact Financial IDs in ResponsesInstantiates PF-02 (redact-pii-egress) on the Gusto read path.
HubSpot
HubSpot Cap Bulk ExportClamps the page size of HubSpot bulk-read tool calls before they reach the HubSpot MCP server, so a single agent request to a covered bulk-read tool can…HubSpot Read-OnlyMakes the HubSpot connection read-only by blocking the write tool.HubSpot Redact PIIRedacts sensitive contact information from HubSpot tool responses before they reach the caller.HubSpot Role-Gate WritesGates every HubSpot write tool behind an IdP group: callers whose JWT groups claim contains crm-writers may create and update CRM records; everyone else gets…
Intercom
Cap Intercom Contact Enumerationcaller is a CRM admin); clamp page size on everything else; allow the restFence Intercom Contact & Company PII ReadsGates Intercom's structured-PII read surface — customer contact and company profiles — by IdP group.Intercom: Mask Card Numbers in Conversation ResponsesMasks payment-card numbers (PANs) in Intercom conversation content returned to agents by the conversation- and free-text-returning read tools.Intercom: Redact PII from Conversation & Contact ReadsScans the free-text returned by Intercom's conversation- and contact-read MCP tools and rewrites high-confidence personal identifiers and credential shapes…
Jira
JIRA: Cap Field and Result Exposure on ReadsNarrows the breadth of JIRA read requests before they run, on the two read surfaces that can pull large amounts of issue data into model context:JIRA: Deny Sensitive Project Search and ViewKeeps issues that belong to a configurable set of "sensitive" JIRA projects out of read access through the JIRA MCP server.JIRA: Protect Sensitive Projects from WritesBlocks write operations against issues that belong to a configurable set of "sensitive" JIRA projects.JIRA: Redact Sensitive Information from Issue ViewsRedacts sensitive content from the responses of JIRA issue-view tools before they reach the caller.JIRA: Role-Gated Writes (Read-Only Default)Makes Jira read-only by default on the MCP path.
Linear
Microsoft 365
Block Agent Email to External RecipientsBlocks agent-initiated Microsoft 365 email sends when any recipient address falls outside a corporate-domain allowlist.Guard OneDrive/SharePoint Share LinksStops agents from opening OneDrive/SharePoint files to the whole internet. It guards the two Microsoft 365 sharing tools:Microsoft 365: Redact PII from Mail, Files & TranscriptsScans the responses of the highest-density PII read surfaces in Microsoft 365 — mail bodies, Excel ranges, SharePoint list items, meeting transcripts, and…Read-Only Baseline: Group-Gated Microsoft 365 WritesThe least-privilege baseline for Microsoft 365 through the gateway: every tool call is allowed only if it is a read , or the caller's IdP token carries the…
Monday.com
Fence Sensitive monday Boards by IdP Groupmonday boards are schemaless business databases: HR/recruiting boards (candidate PII), CRM/deal boards (financial), and IT/security trackers routinely live…monday: Redact PII in Board & Doc ReadsTwo egress controls in one policy, both scoped to the monday MCP read path:
NetSuite
Fence NetSuite HR & Payroll SuiteQL QueriesFences the single biggest exfiltration surface on the NetSuite MCP server — ns runCustomSuiteQL, which runs arbitrary read-only SuiteQL across the entire ERP.NetSuite Cap SuiteQL Bulk ExportInstantiates the PF-08 cap-bulk-export family as a transform-only ingress policy on ns runCustomSuiteQL — the NetSuite MCP tool that runs arbitrary read-only…NetSuite: Redact Financial PII in ResponsesInstantiates PF-02 (redact-pii-egress) on the NetSuite read path.
Notion
Fence Notion Member Directory to Admin & ITDenies calls to the Notion member-directory tool (notion-get-users, matched by the -get-users suffix) unless the caller's IdP groups include an admin or IT…Notion: Redact PII from Read ResponsesScans the responses of the Notion hosted MCP server's content-returning read tools and rewrites personally identifiable information to fixed redaction tokens…
Power BI
Guard DAX Whole-Table Dumps in Power BIPower BI semantic models front the warehouse: a model imports or DirectQueries lakehouse/warehouse tables — finance, HR, customer PII.Power BI: Redact PII in Query ResultsScans the content returned by Power BI's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…
QuickBooks
Cap QuickBooks Bulk Search ExportsClamps the bulk-read levers on every QuickBooks Online search tool so an agent cannot pull the entire general ledger — or a full customer, vendor, or…QuickBooks: Redact Employee & Vendor PII on ReadOn the read path, this policy masks sensitive identifiers in the responses of four QuickBooks Online (QBO) name-entity read tools — get employee, search…
Salesforce
Salesforce Cap Bulk Data ExportBlocks bulk PII extraction through Salesforce query tools by inspecting the free-text query arguments that are the real policy surface for these servers.Salesforce Protect Contact FieldsBlocks Salesforce Contact updates that modify protected fields — ownership, account linkage, contact PII, name, and consent flags.Salesforce Query AllowlistRestricts Salesforce SOQL queries so only Account, Contact, and Opportunity records can be retrieved.Salesforce Read-Only AccessRestricts the Salesforce MCP server to read-only access.Salesforce Redact PIIRedacts personal contact information from Salesforce tool responses before they reach the caller.Salesforce Role-Gated WritesThe PF-12 least-privilege baseline for Salesforce.
ServiceNow
Slack
Slack Role-Gate WritesGates every Slack write-class tool behind an IdP group: callers whose JWT groups claim contains slack-writers may send and schedule messages, add or remove…Slack: Block Agent Posts to External ChannelsDenies Slack message-write calls whose destination is an externally shared Slack Connect channel.Slack: Deny DM and Private-Conversation Reads and SearchDenies the agent read reach into Slack DMs and private conversations on the paths below — the workspace's highest concentration of PII/PHI (HR issues, health…Slack: Deny Read/Search/Summarize of Sensitive ChannelsBlocks read, search, and summarize operations that target a configurable set of "sensitive" Slack channels.Slack: Mask Card Numbers in Message and Search ResponsesMasks payment-card numbers (PANs) in Slack content returned to agents by message-read, thread-read, canvas-read, history, and search tools.Slack: Redact Profile PII from User LookupsRedacts personally identifiable information — email addresses, phone numbers, and Slack custom profile fields (which commonly carry phone, title, and…Slack: Redact Sensitive Information from MessagesRedacts sensitive content from outgoing Slack message arguments before the call reaches Slack.
Snowflake
Block Bulk Export & External Staging (Snowflake)Blocks Snowflake SQL-execution tool calls whose query text moves whole tables off the Snowflake perimeter — bulk export to cloud storage or a stage, and…Fence Snowflake Sensitive Schemas by Data DomainFences customer-designated sensitive data domains inside a Snowflake warehouse by inspecting the SQL text the agent is about to run — not by tool name, which…Snowflake: Redact PII from Query Result SetsScans the row content returned by the result-returning Snowflake MCP tools and rewrites personally identifiable information to fixed redaction tokens before…
Stripe
Read-Only Stripe by Default (Role-Gate Billing Writes)Establishes a read-only-by-default Stripe posture over the MCP path. The named write and destructive billing tools —Stripe: Redact Customer PII from Bulk ReadsMasks customer PII in the responses of Stripe's bulk PII egress channels before they reach the agent.
Tableau
Fence Tableau Datasource ScopeTableau's MCP server is a warehouse proxy: query-datasource runs a VizQL Data Service (VDS) query and returns raw row-level data — PII, PHI, payroll,…Tableau: Redact PII & Mask PANs in Query ResultsTableau is a warehouse proxy: the data-returning tools stream raw row-level content out of whatever the published datasource connects to — PII, PHI, payroll,…
Zapier
Block External Sends Hidden in Zapier InstructionsEvery Zapier MCP tool — in both the agentic and classic modes — accepts a free-text instructions string that Zapier's server-side AI uses to fill any…Role-Gate All Zapier WritesZapier MCP is an aggregator: one connector proxies actions across 9,000+ apps, and every create/update/delete/send funnels through a small, predictable…Zapier: Mask Card Numbers in Read ResponsesMasks payment-card numbers (PANs) in Zapier MCP read responses before they reach the agent.
Zoom
Block External Team Chat Invites & MembersStops a Zoom Team Chat agent from pulling external parties into the organization's chat surface.Fence Zoom Agentic Search to Native CorporaConstrains Zoom's agentic-search tool ( search zoom) so it can only reach Zoom-native content.Gate Zoom Transcripts & Recordings by GroupGates retrieval of Zoom meeting transcripts, AI Companion summaries, and next-steps on the connector's core egress tools, enforcing minimum-necessary access:Zoom: Redact PII in Meeting IntelligenceScans the responses of Zoom's meeting-intelligence read surfaces — AI summaries, verbatim transcripts, recording resources, and Zoom Docs content — and…