ReferencePrivacy & data
Privacy & data
What happens to your data, which data is sent to the AI, and how masking protects it.
What is sent to the AI?
When you ask a question, Power BI Agent only sends the necessary data:
- The data model of your dataset (table names, column names, relationships).
- The query results relevant to your question.
- The required skills and context for an accurate analysis.
Masking: protecting sensitive data
With Masking, you control per column what is sent to the AI:
- Anonymize: the value is replaced with '***'. The field can no longer be read or used by the AI.
- Pseudonymize: the value is replaced with a consistent pseudonym. The AI only sees the pseudonym, so the field can still be used for analysis. In the chat you see the real values yourself.
- Hide table: the entire table is not shown to the AI.
Masking is applied before transmission. The original data in Power BI always remains unchanged.
Note: masking limits what the AI can see, but offers no absolute guarantee and is not a replacement for access control. Access rights to your Power BI data are managed by Power BI itself.
Where is data stored?
- Power BI data: remains in your Power BI environment. Power BI Agent does not store copies.
- Account data, chats & settings: stored in Microsoft Azure in West Europe (GDPR region).
- API keys: stored encrypted, never readable by other users.