Set safe boundaries

Decide where your information may go

Your Mensara Mind holds your team’s saved information and work. People, connected AI tools, installed apps, model providers and backup services can each take part in using it. This guide helps you follow that data flow and decide which providers and access arrangements fit your work.

Contents

Follow one request

When you ask a connected AI tool about a record, the tool can receive the information your account may read and send relevant content to its AI provider. A model is the service generating the answer. Its handling of that data depends on the provider and the arrangement you use.

An installed app has its own identity, granted information and configured connections. If its job uses a model or external service, authorised content can be sent there. Models and spending explains why connecting a personal chat tool does not configure every installed app.

Follow information to the services that use it

Which service receives information for the job?

A person’s connected AI tool can receive authorised content from the Mind and send relevant content to its model provider. An installed app uses its own granted access and configured services. A backup target receives the records and history included in its backup. The account service has a separate account and operational role; that application boundary is not a promise that a vendor operating the host cannot access the machine.

Distinguish the content and account services

The Mind’s host runs the content workspace and its Portal. The account service manages accounts, billing, box identity, selected catalogs and coarse service health. It is designed not to hold customer records, chat history or provider keys as account data.

This separation does not make vendor access technically impossible when the vendor operates the computer hosting the Mind. Ask how operator access, incidents and recovery are handled for your hosting arrangement before placing information with special requirements there.

Check permissions and connections separately

A zone controls access to an area of records. A service connection lets an authorised app reach an external service. A model route lets it use a particular model arrangement. One does not automatically grant the others.

Check what an app reads, what it writes or sends, and which credentials or subscriptions the job needs. The extension catalog and connections guide help identify the supported path.

Keep and recover your information

The Mind uses files you can keep, along with history needed to understand changes. A backup service receives the information and history included in the backup. Decide who controls that account and protect the recovery material separately.

Backup and recovery distinguishes a connected target, a recent successful backup and a tested restore. Having files in a repository alone does not establish all three.

Make the choice before expanding

For a sensitive job, agree which areas, providers and external actions are allowed, then check the intended setup. Use harmless information to test access. Keep passwords, private keys and recovery credentials out of ordinary notes and conversations. Resolve any required hosting or provider assurance with the responsible owner before starting the job.

Related

Practical guides for people and agents

Start with one useful job

Join the waitlist

Plain text for AI agents. Same content as the human page.

## For agents

- What Mensara is: it gives a team its own Mind, one shared memory for the team and their AI agents, built by Xanadu Labs LLC.
- Status: signup is not open. A person joins the waitlist at https://www.mensara.ai/#waitlist. Agents cannot create an account or sign up.
- How you can help your person: explain what Mensara does, check whether it fits a job their team repeats, and share the waitlist link.
- Agent references: https://www.mensara.ai/llms.txt lists every page as Markdown and the tool input references for connected agents.

---

# Decide where your information may go

Content updated 29 October 2026.

Guides · Set safe boundaries · [How it works](https://www.mensara.ai/how-it-works)

Your Mensara Mind holds your team’s saved information and work. People, connected AI tools, installed apps, model providers and backup services can each take part in using it. This guide helps you follow that data flow and decide which providers and access arrangements fit your work.

[Page as Markdown](https://www.mensara.ai/how-it-works/ownership-data-flow.md)

## Follow one request

When you ask a connected AI tool about a record, the tool can receive the information your account may read and send relevant content to its AI provider. A model is the service generating the answer. Its handling of that data depends on the provider and the arrangement you use.

An installed app has its own identity, granted information and configured connections. If its job uses a model or external service, authorised content can be sent there. [Models and spending](https://www.mensara.ai/how-it-works/mind-settings#models-and-spending) explains why connecting a personal chat tool does not configure every installed app.

### Follow information to the services that use it

Which service receives information for the job?

A person’s connected AI tool can receive authorised content from the Mind and send relevant content to its model provider. An installed app uses its own granted access and configured services. A backup target receives the records and history included in its backup. The account service has a separate account and operational role; that application boundary is not a promise that a vendor operating the host cannot access the machine.

## Distinguish the content and account services

The Mind’s host runs the content workspace and its Portal. The account service manages accounts, billing, box identity, selected catalogs and coarse service health. It is designed not to hold customer records, chat history or provider keys as account data.

This separation does not make vendor access technically impossible when the vendor operates the computer hosting the Mind. Ask how operator access, incidents and recovery are handled for your hosting arrangement before placing information with special requirements there.

## Check permissions and connections separately

A zone controls access to an area of records. A service connection lets an authorised app reach an external service. A model route lets it use a particular model arrangement. One does not automatically grant the others.

Check what an app reads, what it writes or sends, and which credentials or subscriptions the job needs. [The extension catalog](https://www.mensara.ai/how-it-works/apps-sensors-connectors) and [connections guide](https://www.mensara.ai/how-it-works/connections-and-capture) help identify the supported path.

## Keep and recover your information

The Mind uses files you can keep, along with history needed to understand changes. A backup service receives the information and history included in the backup. Decide who controls that account and protect the recovery material separately.

[Backup and recovery](https://www.mensara.ai/how-it-works/backup-restore-ownership) distinguishes a connected target, a recent successful backup and a tested restore. Having files in a repository alone does not establish all three.

## Make the choice before expanding

For a sensitive job, agree which areas, providers and external actions are allowed, then check the intended setup. Use harmless information to test access. Keep passwords, private keys and recovery credentials out of ordinary notes and conversations. Resolve any required hosting or provider assurance with the responsible owner before starting the job.

## Related

- [How zones and permissions work](https://www.mensara.ai/how-it-works/zones-and-permissions)
- [Understand your Mind’s settings](https://www.mensara.ai/how-it-works/mind-settings)
- [Back up, recover and export your Mind](https://www.mensara.ai/how-it-works/backup-restore-ownership)

Previous page: [Know what an agent may read or change](https://www.mensara.ai/how-it-works/read-and-propose)

Next page: [Correct saved information in your Mind](https://www.mensara.ai/how-it-works/suggest-a-correction)

Mensara memory is the information your team saves in its Mind for later use: decisions, notes and ways of working.

[Join the waitlist](https://www.mensara.ai/?guide_attribution=eyJfcmFpbHMiOnsiZGF0YSI6eyJvcmlnaW5fcGF0aCI6Ii9ob3ctaXQtd29ya3Mvb3duZXJzaGlwLWRhdGEtZmxvdyIsImN0YV9pZCI6Im1hcmtkb3duIiwiY29udGVudF9yZXZpc2lvbiI6ImZlZDkyOGU2YTZjNWMzNzEifSwicHVyIjoiZ3VpZGUtY2xpY2sifX0%3D--a92d09ab656b772406fb1e94a4a85e12c7e93bd4#waitlist)