data-minimisation

7 Dtwo policies tagged "data-minimisation", including Cap Docusign Directory and Document Egress, Cap Glean Bulk Search Export. Browse by what the control does rather than which app it targets.

On this page

DocuSign
Glean
Gmail
Gusto
HubSpot
Jira
NetSuite

DocuSign

Cap Docusign Directory and Document Egressegress · DocuSignBounds the two largest data-out channels in the Docusign MCP landscape:

Glean

Cap Glean Bulk Search Exportingress · GleanClamps the bulk-export parameters on Glean search calls before they reach the Glean MCP server, so a single agent request cannot pull an entire indexed…

Gmail

Gmail Cap Bulk Exportingress · GmailThrottles mass-harvesting of a mailbox by capping the per-call blast radius of the two Gmail MCP surfaces that return many full email bodies at once:

Gusto

Gusto Cap Roster Exportingress · GustoThrottles full-roster exfiltration on Gusto's two broad outbound list tools — list company employees and list company contractors — by rewriting their…

HubSpot

HubSpot Cap Bulk Exportingress · HubSpotCaps how many records a single agent call can pull out of HubSpot, so an agent (or a prompt injection steering one) can't bulk-export the CRM.

Jira

JIRA: Cap Field and Result Exposure on Readsingress · JiraNarrows the breadth of JIRA read requests before they run, on the two read surfaces that can pull large amounts of issue data into model context:

NetSuite

NetSuite Cap SuiteQL Bulk Exportingress · NetSuiteInstantiates the PF-08 cap-bulk-export family as a transform-only ingress policy on ns runCustomSuiteQL — the NetSuite MCP tool that runs arbitrary read-only…