Data and privacy

Nothing leaves your machine

The plugin makes no network calls of its own. The NetSuite AI Connector is still the only thing that talks to NetSuite, and the plugin doesn't touch its configuration or OAuth. Claude sees what the connector returned, or the plugin's summary of it.

Where everything is stored

Everything lives in the plugin's data directory:

~/.claude/plugins/data/<plugin>/accounts/conn-<connector>/

When account_id is set, the account folder is named <account>-<env>/ instead. Each connector, or each account and environment, gets its own folder, so production and sandbox data never mix.

That folder holds three things. The metadata cache and account profile cover report lists, saved searches, record types, field metadata, subsidiaries, periods and the Profile Card facts. Saved results and write previews sit next to them. The audit log records every NetSuite call, including denied and pending writes.

Nothing is written to your project unless you export it.

Retention

What	Kept for
Saved results	`results_retention_days` (7 by default)
Write previews	The same window as saved results. Previews hold record field values
Cache sections	Until refreshed. Each goes stale after its TTL (see Settings)
Audit log	Until you delete its `audit/` folder

Expired results and previews are deleted when a session starts.

The audit log is kept on purpose, because it's meant for auditors. nsx audit export writes it out as a CSV. See Writes and approvals.

Uninstalling the plugin doesn't delete any of this. The folder stays under ~/.claude/plugins/data/ until you remove it.

Results from other accounts

nsx results only reads the current account's results. To reach a saved result from another account or environment, pass --any-account:

nsx results list --any-account

Exports

nsx results export writes to ./exports/ in the current directory by default. When Claude runs it, that's your project. Pass a path after --csv or --xlsx to write somewhere else:

nsx results export r_7f3a2c --csv
nsx results export r_7f3a2c --xlsx

Exported files contain NetSuite data. When the file lands inside a git repository and isn't ignored, the command prints a warning. If you see it, add exports/ to your .gitignore before you commit anything. nsx audit export writes to the same folder and gives the same warning.

In CSV exports, a text cell that starts with =, +, -, @, a tab or a carriage return gets a leading '. Spreadsheets would otherwise run it as a formula. Plain numbers such as -42 are left alone.

In Cowork and claude.ai

Plugin hooks don't run there, so the plugin stores nothing: no cache, no saved results and no audit log. The connector's results go straight into Claude's context.