What Management OS does with your Attio data.

Management OS reads CRM data from your Attio workspace — specifically: records across People, Companies, Deals, and any custom objects you've defined; List entries and List configuration; Notes; Tasks; and the workspace member list. We do not access Attio email sync content, calendar events, file attachments, or any object outside the scope set documented below.

Why: Management OS is the leadership execution layer above the revenue stack. We synthesize CRM data into a Weekly Intelligence Brief that develops the leader, their team, and their business. Attio's schema-flexible model is a strength here — we read your actual object configuration so the Brief reflects how your team thinks about pipeline, not a stock schema.

We do not write to your Attio workspace. Management OS is a read-only consumer of your Attio data. We do not create, modify, or delete any Attio records — no People, no Companies, no Deals, no custom-object records, no Notes, no Tasks, no List entries, no attributes.

We requested only the Read variants of each scope in the Attio dev console — User Management (Read), Records (Read), List Entries (Read), List Configuration (Read), Object Configuration (Read), Notes (Read), Tasks (Read). The Write toggles for each of these were never enabled on the Management OS app.

All Management OS outputs (Account Plans, Coaching Briefs, Forecast Locks, Meeting Prep dossiers, Pitch Decks) are generated and stored in Management OS's own database and surfaced through the Management OS application — not pushed back into your Attio workspace.

Every scope below is Read-only. We requested the minimum scope set needed to deliver the Management OS feature surface.

Required scopes (7)

All seven scopes are requested on every connection. Without them, the core Management OS feature surface does not function.

Application database: Supabase Postgres (Management OS's production database, US East). Encrypted at rest (AES-256), encrypted in transit (TLS 1.3). Workspace-scoped row-level security (RLS) means one customer's data is never visible to another.

OAuth tokens: Stored in the same Supabase database under workspace-scoped RLS. Attio access tokens are long-lived bearer tokens that do not expire and do not refresh (per Attio's OAuth spec) — they remain valid until the user explicitly revokes from Attio's side or from Management OS's Settings. Tokens are encrypted at rest and never returned to client browsers. Only the Management OS server-side runtime has access via service-role credentials.

Inference layer: Anthropic API (Claude models). CRM data required for a specific brief generation is passed to Anthropic; outputs are returned to Management OS and stored in our database. Anthropic does not train on customer data per their API terms.

Retention: We retain Attio-sourced data while your subscription is active. On disconnect we delete the OAuth token immediately. On subscription cancellation, customer data is retained for 30 days for restoration, then permanently deleted. Data subject deletion requests are honored within 30 days per our Privacy Policy.

1. Sign up at mgmt-os.ai and complete onboarding to your workspace
2. Open Management OS → Settings → Integrations
3. Find Attio in the integration directory and click Connect Attio
4. You'll be redirected to Attio's authorization screen (app.attio.com/authorize). Sign in with the Attio account whose workspace you want Management OS to read from
5. Review the requested scopes (all Read-only) and click Authorize
6. You'll return to Management OS with a confirmation that the integration is connected. The initial sync starts immediately and typically completes within 2-5 minutes

Workspace-level: Attio OAuth grants are scoped to a single workspace. To connect multiple Attio workspaces, repeat the install flow from each workspace; tokens are stored separately.

The Weekly Intelligence Brief is the primary surface. Three pillars synthesize your Attio data:

• Develop Your Business — deal scoring (every open Deal across your Deal Lists scored against the Opportunity OS rubric), forecast accuracy, account plans, champion-behavior alerts, renewal cascade
• Develop Your Team — coaching priorities mapped to specific reps and deals, rep-effectiveness rankings, 1:1 prep, GROW conversation planners
• Develop Yourself — leader focus, calendar audit, ninety-day competency focus, decision deadlines you're sitting on

Ask Anything (AMA) — a conversational surface where you can query your Attio data in plain English. Examples: "Which Deals slipped from this month to next?", "Show me the top 5 Companies on my Target List with no Note in 14 days", "What's my coverage ratio against quota by rep?"

1. Open Management OS → Settings → Integrations
2. Find Attio in the connected integrations list
3. Click Disconnect → confirm

On disconnect we immediately delete the stored OAuth token and stop reading any new CRM data. Previously synthesized briefs remain in your Management OS workspace as historical records — they are not deleted automatically because they may contain decisions and context the leader still references.

Note: Attio does not document a public token-revocation endpoint, so disconnecting from Management OS removes the token from our database but does not force-invalidate it on Attio's side. For full server-side revocation, also uninstall the app from your Attio workspace (see next section).

To remove all historical briefs and data after disconnect, email privacy@mgmt-os.ai with your workspace identifier. We process deletion requests within 30 days.

1. Sign in to Attio as a workspace member
2. Open Workspace settings → Apps
3. Find Management OS in the installed apps list
4. Click into the app and choose Uninstall

Uninstalling from Attio's side invalidates the workspace-level grant. Our next API call returns 401 and we surface a re-connection prompt in Management OS Settings.

Security incident reporting: security@mgmt-os.ai
Privacy / data subject requests: privacy@mgmt-os.ai
Integration support: support@mgmt-os.ai

For general questions about Management OS, see our Support page or Manifesto.