Docs/ HydraAI
Privacy and safety
IMPORTANT
Use HydraAI on a development or sandbox site. It makes real changes, and it can't undo them automatically. Nothing in HydraAI stops you from connecting a live site, so this is up to whoever sets it up. For production use, talk to us about the Enterprise plan.
It acts as you
Each time you send a message, your site issues a short-lived key for your user, valid for one hour. HydraAI uses it to act on your site, so every lookup and change runs with your roles and permissions. If you can't open a record, neither can HydraAI.
HydraAI's service keeps no password or permanent key for your site.
The one exception is database queries. They skip record-level user permissions, which is why only System Managers can run them.
What each mode allows
| Mode | Changes your site? |
|---|---|
| Ask | No. Write actions are blocked. |
| Plan | Not until you press Proceed. Write actions are blocked while it's planning. |
| Fast (default) | Yes, straight away |
HydraAI can delete only what you could delete yourself. In Fast mode it does so without asking, so use Plan for anything that deletes.
It checks its own work
Before saving a script, HydraAI test-runs it and checks its field names against your site. If it would error, it's fixed or dropped, so a broken script never lands on your system. After a change, it reads your site again to confirm the change took effect.
What leaves your site
To do the work, these are sent to HydraAI's service and on to the AI model provider:
- your messages and attachments;
- the page you're on, when the page toggle is on;
- the records and results HydraAI reads while it works (long results are cut short);
- your draft text while you type, to count how much of the chat's memory is used.
Lookups in the Frappe and ERPNext documentation go to outside documentation services. They include the search text, not your records.
Activity log
Every action is logged: what HydraAI did, to which record, and when. Your team can review the full history anytime in Hydra Audit Log, and sensitive values such as passwords, salaries and bank details are hidden in the log. Incognito chats aren't logged.
No surprise bills
Usage is measured in credits: a question costs about 1, a typical build about 10. You can always see what's left, you get a warning at 80%, and HydraAI pauses when you reach your limit. There's no overage.