DocsAI
What the AI sees, and what it won’t do
What each kind of AI request sends to the Native AI service, what never leaves your site, and the rules the AI always follows.
What a request sends#
| Request | What it sends |
|---|---|
| Builder requests (assistant, Design mode, website generation) | What the request needs: the structure and text of the page or site involved, the design system, image addresses and alt text, the names of your integrations (not their secrets), your AI settings (tone, language, brand guidelines, instructions), and what’s being edited — a post’s type, fields and sample values when you design it. |
| Report summaries | The report’s facts — numbers, titles and statuses. Never page content, code or personal data. |
| Code assistant | The snippet you’re working on and the names (not values) of your variables and secrets. It warns before sending code that looks like it contains a key. |
| License checks and updates | The site’s address, the plugin version and a signature proving the site holds the license. |
The AI never receives passwords, API keys, integration secrets, form submissions, or analytics about individual visitors. Requests are processed by the AI model provider (Anthropic for Claude models) to produce the answer. Your site doesn’t need to be reachable from the internet: the builder sends what the request needs.
What the AI always does#
- Works with your permissions: its WordPress actions run in your own session, so it can never do more than you can. If your role can only edit content, the AI only edits content.
- Builds with native elements, your tokens and classes — never pasted HTML, Custom HTML elements, custom JavaScript or PHP in Query Loops.
- Asks before changes that reach other pages (unless you turned that off), and always asks before high-risk actions.
- Saves code snippets as drafts for a person to review and activate.
- Leaves locked elements alone.
- Keeps your content safe: posts, media, users, comments, custom fields and form submissions are never changed by site generation or regeneration.
What it won’t do#
- Regenerate your site from a normal request — that’s a separate, protected flow in Native AI → Site.
- Use a feature that’s switched off, or switch one on without your confirmation.
- Invent facts you gave it: your phone numbers, addresses, prices and hours are used exactly; anything it has to make up is marked as sample content for you to review.
- Publish on its own. You decide when changes go live.
More detail on where data lives and what this website does with your details: Privacy & data.
Related articles
Still have a question? Email us at support.