Documentation

Privacy & data

What happens to your data, which data is sent to the AI, and how masking protects it.

What is sent to the AI?

When you ask a question, Power BI Agent only sends the necessary data:

  • The data model of your dataset (table names, column names, relationships).
  • The query results relevant to your question.
  • The required skills and context for an accurate analysis.

Masking: protecting sensitive data

With Masking, you control per column what is sent to the AI:

  • Anonymize: the value is replaced with '***'. The field can no longer be read or used by the AI.
  • Pseudonymize: the value is replaced with a consistent pseudonym. The AI only sees the pseudonym, so the field can still be used for analysis. In the chat you see the real values yourself.
  • Hide table: the entire table is not shown to the AI.

Masking is applied before transmission. The original data in Power BI always remains unchanged.

Note: masking limits what the AI can see, but offers no absolute guarantee and is not a replacement for access control. Access rights to your Power BI data are managed by Power BI itself.

Where is data stored?

  • Power BI data: remains in your Power BI environment. Power BI Agent does not store copies.
  • Account data, chats & settings: stored in Microsoft Azure in West Europe (GDPR region).
  • API keys: stored encrypted, never readable by other users.