Customer Knowledge Base

Data Privacy and Security with MCP (FAQ)

๐Ÿงช MCP integration is currently in closed beta. This feature is available to selected users only. To request access, contact your emax digital account manager.

Connecting company data to an AI tool raises important questions, and it should. This page explains what the emax digital MCP does with your data, what it records, and what it never sees.

The short version

The emax digital MCP is structured access to your reporting data in emax digital. It is not an AI system. Put simply, the MCP is the database, not the brain.

Your AI tool (Claude, Microsoft Copilot, ChatGPT, Langdock or another MCP-capable assistant) stays fully on your side and under your control. When your AI tool asks for data, emax digital returns it. It works the same way the platform responds when you open a dashboard in your browser.

What reaches emax digital and what doesn't

Reaches emax digital

Never reaches emax digital

Data requests from your AI tool (which data, plus parameters such as date range or marketplace)

Your prompts

Your emax digital login, used to check your permissions

Your AI tool's answers or output

Technical metadata needed to operate and secure the service

Other data sources or systems connected to your AI tool


How your AI tool processes or uses the returned data

Frequently asked questions

Is the MCP an AI that analyzes my data?

No. The MCP doesn't interpret, summarize or analyze anything on its own. It answers data requests from your AI tool. All reasoning happens inside your AI tool, on your side.

Can emax digital see my prompts or conversations?

No. Your prompts and your AI tool's responses never reach emax digital. We only receive the data request your AI tool makes. That request tells us which data was requested, not why or what you asked.

Can emax digital see which other tools or data sources I use with my AI?

No. The MCP has no visibility into anything else connected to your AI tool.

Which data can my AI tool access through the MCP?

Your AI tool can access exactly the data your own emax digital login can access. That means only accounts that are connected in your emax digital setup, and only within your existing user permissions. The MCP never widens your access. For the full data scope, see What Data Emma can Access.

How is my Amazon account data handled?

emax digital only uses your Amazon data after you have authorized the connection yourself in emax digital under Setup > Data Connection. Authorization uses Amazon's official Login with Amazon technology. The same rules apply to all Amazon data sources connected this way:

  • Selling Partner API: Vendor Central and Seller Central data

  • Amazon Ads API: Sponsored Ads and Amazon DSP data

  • Amazon Marketing Cloud (AMC): as soon as AMC data becomes available in emax digital

The MCP doesn't add any new data access. It only works with the connections you have already authorized, under exactly the same rules as the emax digital platform today.

What does emax digital record when I use the MCP?

The MCP records which authenticated user requested which data at what time, including the request parameters (for example date range or marketplace). It also records the technical metadata needed to operate and secure the service.

This is the same type of record that already exists whenever someone on your team opens a dashboard in emax digital. Example: "User X requested inventory data for marketplace Y on date Z."

Who at emax digital can access these records?

Only our engineering team can access them, and only where necessary to operate and support the service. Access is restricted by function and documented in our technical and organizational measures (TOMs), which are available on request together with our data processing agreement (see below).

What are these records used for?

We use them only to operate, secure and debug the MCP and to make it more reliable. We don't sell them or share them with third parties. We don't use your workflows, use cases or business logic to build features, templates, AI agents or offerings for other customers.

How long are these records kept?

Access logs are deleted automatically after 90 days. This is a rolling, system-wide routine under our data policy. It applies to every customer in the same way, so you can rely on it.

Is the feedback I share with emax digital confidential?

Yes. We treat what you share with us confidentially: use cases, feedback, workflow descriptions and anything visible in calls or screen shares.

Your feedback helps us improve the general functionality of the MCP. Examples are a clearer tool description, a different data cut or a missing field. Your specific processes, decision logic and use cases remain your know-how, and no rights to them are transferred. You decide how much detail you share. We don't need to know how you run your business, only how you want to use the MCP.

Can I get a data processing agreement (DPA / AVV) and your TOMs?

Yes. The MCP uses your emax digital login only to verify your permissions. It processes your Amazon data under the same rules as the emax digital platform. If your organization needs a data processing agreement (DPA, in German Auftragsverarbeitungsvertrag / AVV) including our technical and organizational measures (TOMs), we're happy to provide it. Just request it at support@emax-digital.com.

๐Ÿ’ก Do you think the content on this page needs improvement? Let us know at support@emax-digital.com