SafraSync connector for Claude

The connector lets Claude look up, on your behalf, SafraSync data you can already see in the system. It is read-only: it doesn't create, change, approve, issue or delete records. It only works after you sign in to SafraSync and authorize access, and it can be disconnected at any time.

• Connection identification: your SafraSync user, the app name reported by Claude (for example, "Claude" or "Claude Code"), and the dates of connection and last use.
• Connection credentials: authorization codes and access tokens. We only store a cryptographic fingerprint (SHA-256 hash) of these values, never the values themselves.
• Technical logs: the tool queried, time, duration and user and company identifiers, for security, support and abuse prevention. Error reports go through a filter that removes sensitive data.
• Audit: connections and disconnections are recorded in your company's audit trail, visible to its administrators.

We do not receive or store the content of your conversations with Claude. We only receive the requests Claude makes to the connector's tools (for example, "list pending tasks" or "find contract X").

When you ask a question, Claude may call one of the connector's tools and SafraSync answers with the data needed for that answer — for example, contracts, loads, payables and receivables, counterparty names and documents — always limited to your role's permissions. That data becomes part of your Claude conversation and is handled by Anthropic under the privacy policy and terms of Claude that apply to your account, including your retention and data-use settings in Claude.

SafraSync does not sell data, does not share it with other third parties through the connector, and does not use query data to train models.

We process this data to provide the service you requested (answering your questions in Claude with your company's data), keep the platform secure and comply with legal obligations. The connection depends on your explicit authorization, which you can withdraw at any time by disconnecting.

• Authorization codes: valid for 2 minutes and single-use.
• Access tokens: valid for 1 hour.
• Refresh tokens: valid for up to 30 days and replaced on every use; expired tokens are deleted daily.
• Disconnected or unused connections: deleted after 30 days. Audit records follow the platform's retention policy.

The connection uses OAuth 2.1 with PKCE and only accepts redirects to Claude's official addresses or to your own computer (Claude Code). All communication is encrypted (HTTPS). On every request we check that your user, role and company are still active; otherwise access is blocked immediately.

You can disconnect at any time in My account → Claude connections in SafraSync, which revokes every token of that connection. Under the LGPD, you can request confirmation, access, correction, anonymization or deletion of your data, among other rights, through the contact below. Your company's operational data is controlled by the company itself; requests about it can be sent to its administrator.

Privacy questions and requests: [email protected]. If this policy changes, we will update the date at the top of this page.

How to use the connector: SafraSync in Claude.