Privacy & Data
NodeKAT connects to your organization’s tools — Slack, GitHub, Jira, Notion, Google Drive — to answer questions with cited sources. This page explains what NodeKAT accesses and how that access is controlled.
Read-Only Access
Section titled “Read-Only Access”All integrations are read-only. NodeKAT cannot create, edit, or delete anything in your connected tools:
| Integration | Permissions | Cannot Do |
|---|---|---|
| Slack | Read channel history, threads, and search (scopes like channels:history, search:read) | Send messages, join channels, modify content |
| GitHub | Read code, symbols, and repositories (scoped to your organization) | Push code, create PRs/issues, modify repos |
| Jira | Read issues and users (only read:jira-work and read:jira-user scopes) | Create, update, or delete tickets |
| Notion | Read pages and databases explicitly shared with the integration | Create, edit, or delete content |
| Google Drive | Read files (only drive.readonly scope) | Create, edit, or delete files |
No Inbound Access
Section titled “No Inbound Access”NodeKAT only makes outbound API calls to your connected tools. No webhooks, inbound endpoints, or firewall rules are required — external services never call into your NodeKAT instance.
Credential Handling
Section titled “Credential Handling”- Credentials are stored encrypted at rest in the configuration store and accessed only server-side
- Credentials are never exposed to browsers or client-side code
- Tokens are validated on startup — invalid or expired credentials disable the affected integration gracefully
- Only the credentials configured by your administrator are used; NodeKAT cannot access content beyond what those credentials permit
Access Boundaries
Section titled “Access Boundaries”NodeKAT respects the access boundaries of each integration:
- Slack — results are filtered to only channels the bot has been explicitly invited to, even when broader search access exists
- GitHub — searches are scoped to the configured organization, with optional repo exclusions
- Notion — only pages and databases explicitly shared with the integration are visible
- Google Drive — only files accessible to the authorized account are visible (optionally limited to specific folders or a shared drive)
- Jira — only issues readable with the configured OAuth app permissions
What Is Stored
Section titled “What Is Stored”To answer questions, NodeKAT extracts and indexes content from your connected tools into a knowledge graph. This includes:
- Documents, messages, threads, tickets, and files the integrations can access
- Extracted entities and relationships derived from that content
- Citations linking answers back to their sources
NodeKAT does not collect data beyond what its configured integrations can access, and it does not share your data with other tenants or customers.
More Questions?
Section titled “More Questions?”See the FAQ or contact your NodeKAT administrator.