# Set policies and protect data > Choose what members can use, how carefully Dvina asks before it acts, what sensitive data it masks, and which apps and sharing are allowed. Policies decide what every member of your Livespace can use. Changes apply to everyone at once. Policies, data protection, integrations and sharing come with the Enterprise plan. Owners and admins set them in Settings, under the Livespace group: **Policies**, **Data Protection**, **Integrations** and **Sharing**. ## Turn features on or off 1. Open Settings and choose **Policies**. 2. Under **Features**, turn each one on or off. You can turn off **Computer use**, **Local files and commands**, **Browser**, **Simulators and emulators**, **Voice conversations**, **File uploads**, **Connected apps**, **Custom MCP servers** and **Proactive**. The line under each switch says what members can or can't do while it's set that way. When you turn a feature off, members don't see it, and Dvina tells them your admin turned it off. ## Set how carefully Dvina asks Under **Tool approvals**, choose the **Least careful mode** members may use: **Any mode**, **Ask every time**, **Accept edits**, **Auto** or **Never ask**. Members can't choose a mode below this one, and a member whose mode is less careful runs in this one. **Agents act on their own** decides whether members can let an agent make changes without asking. Turn it off, and every agent asks before it acts. Sending, paying and deleting always ask. ## Require masking Personal identifiers, like card, phone, email, bank and ID numbers, are masked before the AI sees them. Members can turn masking off for a single chat. To stop that, turn on **Always mask personal data** under **Privacy**. Members then can't turn masking off in a chat. ## Set goal policies With **Goals** on, Dvina can work on a task in rounds until it meets a goal. Turn it off, and Dvina does each task once. Members always see a goal and start it themselves. While **Goals** is on, you can also set: - **Most rounds per goal**: a goal stops at this many rounds with its best version. - **Usage per goal**: the most of a member's weekly usage one goal may spend, from **Up to 5%** to **Up to 50%**. - **Only from templates**: goals follow one of the Livespace's rubric templates, instead of a rubric Dvina writes. Rounds and usage can also be **No limit**. ## Protect sensitive data **Data Protection** finds sensitive data in what people send and what Dvina works with, and acts on it. Each rule does one thing when it finds a match: **Mask**, **Pseudonymise**, **Block**, **Warn** or **Log only**. ### Use the built-in rules 1. In Settings › **Data Protection**, choose **Built-in rules**. 2. Turn each rule on or off, and choose what it does. The built-in rules find email addresses, payment card numbers, IP addresses, IBANs, phone numbers, passport and ID card numbers, and API keys and access tokens for common developer services. **Pseudonymise** is offered only for email addresses, phone numbers, IBANs and IP addresses. ### Add your own rule 1. In **Data Protection**, under **Your rules**, choose **Add a rule**. 2. Give it a **Name**, then choose what it **Finds**: a pattern, a **Term list** or a **Pattern with check digit**. 3. Enter the **Pattern**, or choose the term list. For a pattern with check digit, choose the **Check digit**, such as **Luhn (cards, IMEI)** or **IBAN (mod 97)**. Turn on **Match case** if case matters. 4. Choose what it does in **When found**, and in **Applies to**, choose **Outside models only** or **All models**. 5. Under **Where it checks**, choose **Messages**, **Answers**, **Uploads**, **App actions**, **Memory**, **Search** or **Proactive**. Choose none to check everywhere. 6. Choose **Save**. A pattern is checked when you save, and Dvina says if it isn't valid. To change a rule, choose it. To stop it, turn off **On**, or choose **Delete Rule…**. A deleted rule stops protecting the Livespace at once. ### Upload a term list A term list holds exact words to find, like project code names, customer names or internal terms. 1. In **Data Protection**, under **Term lists**, choose **Upload a list…**. 2. Choose a .txt or .csv file, with one term per line. The list takes the file's name. Then add a rule that finds it. To update a list, choose it, then **Replace with a New File…**. Deleting a list also deletes the rules that use it. ### Test your rules 1. In **Data Protection**, choose **Test your rules**. 2. Paste some text into **Text to test**, then choose **Test**. Dvina shows each rule that matches, how many times, and what it would do. **Last 30 days** shows how often each rule acted, and where. ### Use your own DLP service If your company already has a DLP service, such as Microsoft Purview, choose **Add a service** under **Your DLP services**, fill in its settings, then choose **Test connection**. You also choose what happens **When it flags content** and **When it can’t be reached**. ## Choose which apps and servers members connect In Settings › **Integrations**: - Under **Allowed apps**, choose **Allow only…** and pick apps. Allowing apps blocks all others. - Under **Blocked apps**, choose **Block…** to stop single apps. With no allowed apps, every app not blocked can be connected. - Under **Allowed hosts** and **Blocked hosts**, enter an MCP server's host, like mcp.example.com, or \*.example.com for a domain and its subdomains, then choose **Add**. Allowing hosts blocks all others. To turn off connected apps or custom MCP servers for everyone, use **Policies**. ### Revoke a member's connection **Members’ connections** lists every app and MCP server each member has connected. 1. Choose **Revoke…** next to a connection. 2. Choose **Revoke** to confirm. Dvina stops using that connection. The member can connect again if your policy allows it. ## Set who members can share with In Settings › **Sharing**: - Turn off **Share outside the Livespace**, and members can share only with people in the Livespace. - Turn off **Public links**, and members can't create public links. Turning these off keeps what is already shared. **Shared outside** lists every item shared with someone outside the Livespace and every public link, with its owner. To end them all, choose **Revoke all…**, then confirm. Owners keep their items. ## Good to know - Every change to policies, data protection and sharing is recorded in the [audit log](/docs/teams/audit-log), along with each time data protection masks or blocks a message. ## Related - [Dvina for teams and companies](/docs/teams/overview) - [Connectors](/docs/connectors/overview) - [Custom apps and MCP servers](/docs/connectors/custom-apps) - [Sharing](/docs/use-dvina/features/sharing) - [Privacy and data](/docs/help/privacy-and-data)