xoq AI connector privacy

The connector accesses only the xoq workspace and permissions selected during authorization. Tenant access and refresh tokens are encrypted at rest. MCP access and refresh tokens are stored only as one-way hashes.

Tool calls are audited using the tenant, employee, tool name, argument hash, outcome, latency, and the short trace the AI assistant writes to explain what it is doing. Audit records are retained for 90 days.

The assistant can also send the xoq team feedback about a tool that did not work, or ask for a capability xoq is missing. Those reports are written by the assistant, are kept until the xoq team has acted on them, and are not part of the workspace's business data.

Disconnecting or revoking the connector invalidates its grant. xoq business data remains in the tenant system of record.