What can an AI assistant do in Decisa — and what can it not do?

A connected AI assistant can read your Decisa data and draft changes for you, all within your role. It can't see anything you can't, and nothing that spends money or changes your account happens without your approval.

The simple version

Think of a connected assistant as a teammate who can read everything you can read and can prepare work for you — but can't push the "go" button on anything risky by itself. You stay in control of every change that matters.

What it can do

• Answer questions about your data — "What was my ROAS last week?", "Which campaigns spent the most with the worst return?", "Did my checkout webhooks all arrive?"
• Pull reports and lists — campaigns, ad accounts, conversions, clicks, UTM links, audit history, and more.
• Explain and recommend — summarize what's working, flag what's leaking money, and suggest next steps.
• Draft changes for your review — for example, "prepare a 30% budget cut on the worst campaign". The assistant builds the change; you review and apply it.
• Do light housekeeping — create a UTM link, favorite a campaign, mark a notification read — small, easily reversible actions.

What it cannot do

• See anything beyond your permissions. It inherits your role in each workspace. If you can't view billing or pause campaigns, neither can it.
• Spend money or apply risky changes silently. Budget changes, pausing or launching campaigns, and anything that moves money go through Decisa's review-and-apply flow — they become a draft you approve. See Review and apply changes.
• Reach a workspace you've blocked. If you've blocked a workspace for that connection, every request to it is refused.
• Use tools your workspace hasn't turned on. Attribution tools only appear once Attribution is active; campaign tools once Campaign Management is active. Everything else shows a "Not activated" badge and stays hidden.

Read-only vs full access

When an assistant connects, it can ask for read-only access (look and report, never change) or full access (also draft changes). You can see which one each connected app has under "Connected apps" — it's labeled Read-only or Full access. Read-only is a good default if you only want answers. See Is connecting an AI assistant safe?.

A note on confirmations

Because one connection covers all your workspaces, when an assistant makes a change it must name the exact workspace it's about to change first. If it doesn't, Decisa stops and asks it to confirm — so a change never lands in the wrong workspace by accident.