AI settings

Pilot

Connected AI apps are currently enabled only for pilot organizations. Settings → AI is part of the new version of the dashboard, which reaches organizations step by step.

Settings → AI decides whether AI apps may read your organization’s Focus data at all, and which data. Everything is off until the owner turns it on. Admins see the page and its values; only the owner can change them.

When connected AI apps are not available to your organization, the page says why instead of showing the switches: they are not part of your plan, your organization is not in the pilot, or they are turned off for this service (mcp_not_available).

The switches

The Access tab has four switches, all off by default:

Switch	What it does
Allow AI access	The main switch. While it is off, no AI app can read anything, whatever the other switches say.
Allow external AI apps (MCP)	Lets people connect the AI apps you approve under Settings → AI → Apps (approving AI apps).
Share display names	Shows people’s names to AI apps. While it is off, each person appears under a pseudonym (below).
Share website domains	Adds the domains of the websites people used (for example example.com) to the app and website totals. While it is off, AI apps see apps only.

Below them, AI answers in the help center is marked as coming soon: it cannot be changed yet and has no effect.

The page also shows the server address people enter in their AI app, https://mcp.focus.workify360.com/mcp, with a button to copy it (connecting an AI app).

Pseudonyms instead of names

With Share display names off, an AI app never gets a person’s name or their Focus user id. Each person appears as a pseudonym such as Person 7K2Q (Kişi 7K2Q in Turkish), with an id that stays the same while one connection lasts and changes when the app connects again, so pseudonyms cannot be linked across connections or organizations. The person who connected the app can still ask about my day; for others the app works with the pseudonyms.

With the switch on, the app sees the names as they are written in Focus, cleaned of hidden characters and shortened to 64 characters. The rest of the data rules stay the same.

Why website domains are separate

A list of website domains can say much more about a person than app names: a visit to a health, religious, union or job site can reveal something that the law treats as a special category of personal data. That is why domains have their own switch and stay off unless you turn them on on purpose. Even with the switch on, an AI app gets domain names and minutes only, never full addresses, page titles or window titles (what AI apps can see).

Turning something on

Turning on any of the four switches, or approving an app, widens what leaves Focus. So the owner:

1. confirms their sign-in if it was more than 10 minutes ago (step_up_required, confirming sensitive actions), and
2. reads the summary of what will be shared and confirms, as the data controller, that the organization has what it needs to share this data with the AI apps it approves. Without this confirmation the change is refused (acknowledgement_required).

On confirmation, Focus publishes a new version of your organization’s privacy notice about AI apps, in Turkish and English: which apps are approved, which data they may read, what is never shared and how to withdraw. The owner’s acknowledgement is recorded with it. Every employee is shown the new version the next time they open the dashboard and answers whether they consent (privacy notices). The change is also written to the audit log.

Turning something off

Turning a switch off needs no data-controller confirmation and does not publish a notice, and the owner does not have to confirm their sign-in for it: the off switches always work, also while your subscription is read-only or your plan no longer includes connected AI apps. Revoking or denying an app works the same way. It takes effect on the next request of every connected app: with Allow AI access or Allow external AI apps (MCP) off, apps get an answer saying that AI access is turned off in the organization (ai_disabled). People’s connections are kept, so when you turn access on again they can reconnect without granting it again.

If someone else saved the page while you were editing it, saving is refused (version_conflict); reload the page and make your change again.