Connected agents and your data

When you connect an agent, you choose one business, name the agent, review its requested scopes, and confirm with your passkey. Foundry records that grant and applies your business’s Control matrix to every tool call.

Access and records

The agent receives a short lived access token and a rotating refresh token. Foundry stores token hashes, the client, the selected business, scopes, status, and an audit record. The consent page does not show customer data. A connected agent can only receive information from tool calls permitted by the grant and Control matrix.

Revoke access

An owner or admin can review and revoke a connection in Office → Connected agents. Revocation blocks its next request and its refresh token family. Removing an agent credential also stops access. Audit records remain subject to Foundry’s retention obligations.

Read the full privacy policy and terms. For questions, use contact or email contact@myfoundry.io.