What are we working on?
Ask a question, create an output, or build an app that works with your tools and data.
Get Started
Build a restaurant technology dashboard
Monitor POS uptime, drive-thru latency, and digital ordering health
App
Monitor POS uptime, drive-thru latency, and digital ordering health
Draft an IT security & data privacy policy
Generate a policy grounded in your security standards and PCI-DSS
Document
Generate a policy grounded in your security standards and PCI-DSS
Build a Q3 IT infrastructure review deck
Pull data from Jira and Confluence into slides
Slide Deck
Pull data from Jira and Confluence into slides
Connect to our restaurant POS system and build a dashboard showing POS uptime, drive-thru latency, digital ordering health, and system alerts across our top locations.
AI
I'll need access to your restaurant technology APIs. Let me request that through a Gatekeeper.
🔒 Gatekeeper: Restaurant POS API
Requesting read-only access to POS health metrics, drive-thru timing data, and digital order channel status. The Gatekeeper holds the credential and logs every query.
Requesting read-only access to POS health metrics, drive-thru timing data, and digital order channel status. The Gatekeeper holds the credential and logs every query.
Approved.
AI
Access granted. Pulling restaurant technology data now.
Executed code
const restaurants = await env.POS_API.getSystemHealth({
locations: "top-8",
include: ["pos_uptime", "drive_thru", "digital_orders"]
});
const alerts = restaurants.filter(
loc => loc.posUptime < 99.0 || loc.driveThruAvg > 300
);
app.render(RestaurantTechDashboard, { restaurants, alerts });
AI
Restaurant Technology Dashboard is live. Connected via Gatekeeper -- read-only, every query logged.
I see 3 locations with degraded performance. Want me to set up ServiceNow tickets automatically when POS uptime drops below 99%?
I see 3 locations with degraded performance. Want me to set up ServiceNow tickets automatically when POS uptime drops below 99%?
+
Draft an updated IT Security & Data Privacy Policy for our PCI-DSS environment and guest data handling. Base it on our current security standards, NIST 800-61, and CCPA requirements.
AI
I'll pull from your company's context library to ground this in Chick-fil-A's standards.
📚 Context Library: Security Standards
Loading Chick-fil-A's current IT Security policy (v2.1), PCI-DSS v4.0.1 requirements, NIST SP 800-61r3, and CCPA compliance guidelines. These are curated by your security team and read-only to the agent.
Loading Chick-fil-A's current IT Security policy (v2.1), PCI-DSS v4.0.1 requirements, NIST SP 800-61r3, and CCPA compliance guidelines. These are curated by your security team and read-only to the agent.
AI
Context loaded. I've identified 3 gaps in the current policy:
1. Missing IoT/kitchen system device classification for connected equipment
2. Guest mobile app data retention not aligned with CCPA requirements
3. Third-party delivery partner data sharing procedures need updating
I'll address all three in the updated draft.
1. Missing IoT/kitchen system device classification for connected equipment
2. Guest mobile app data retention not aligned with CCPA requirements
3. Third-party delivery partner data sharing procedures need updating
I'll address all three in the updated draft.
AI
IT Security & Data Privacy Policy v3.0 draft is ready. Structured per NIST 800-61 with Chick-fil-A-specific procedures and PCI-DSS mappings.
You can edit directly, export to Google Docs, or share for review. The document stays connected to the context library -- if standards change, I can flag sections that need updating.
You can edit directly, export to Google Docs, or share for review. The document stays connected to the context library -- if standards change, I can flag sections that need updating.
+
Build a Q3 IT infrastructure review deck summarizing our platform migrations, restaurant technology rollouts, and upcoming initiatives. Pull data from Jira and Confluence.
AI
I'll need access to your project tracking and wiki.
🔒 Gatekeeper: Jira (read-only)
Requesting access to the INFRA and RESTAURANT-TECH projects. Read epics, status, and completion data only.
Requesting access to the INFRA and RESTAURANT-TECH projects. Read epics, status, and completion data only.
🔒 Gatekeeper: Confluence (read-only)
Requesting access to the Architecture Decisions space. Read pages only.
Requesting access to the Architecture Decisions space. Read pages only.
Both approved.
AI
Executed code
const epics = await env.JIRA.getEpics({
projects: ["INFRA", "RESTAURANT-TECH"],
quarter: "Q3-2026"
});
const adrs = await env.CONFLUENCE.getPages({
space: "architecture-decisions",
since: "2026-07-01"
});
deck.generate(QuarterlyReview, { epics, adrs });
AI
Q3 IT Infrastructure Review deck is ready -- 4 slides from live Jira and Confluence data.
You can regenerate anytime to pick up changes, or edit individual slides. Export to Google Slides or PDF when ready to present.
You can regenerate anytime to pick up changes, or edit individual slides. Export to Google Slides or PDF when ready to present.
+
Gadget
Code
Connections
Restaurant Technology Dashboard
99.4%
Avg POS Uptime
3
Degraded Locations
42%
Digital Order Mix
2.8m
Avg Drive-Thru Time
System Alerts
⚠️ Midtown Atlanta, GA (#0001) -- POS terminal 3 offline since 10:42 AM. Kitchen display fallback active. ServiceNow ticket auto-created.
⚠️ Buckhead, GA (#0847) -- Drive-thru sensor latency at 4.1 min avg, above 3.5 min threshold.
⚠️ Plano, TX (#1203) -- Mobile ordering gateway response time degraded (p95: 2.8s vs 1.2s target).
Restaurant System Health
College Park, GA (#0042)
100%
Healthy
Nashville, TN (#0315)
99.9%
Healthy
Dallas, TX (#0512)
99.8%
Healthy
Charlotte, NC (#0678)
99.5%
Healthy
Plano, TX (#1203)
98.2%
Monitor
Buckhead, GA (#0847)
97.1%
Degraded
Midtown Atlanta, GA (#0001)
94.3%
Alert
Page
Source
Connections
IT Security & Data Privacy Policy v3.0
Chick-fil-A -- IT Security & Data Privacy Policy
1. Purpose
This policy establishes the procedures, roles, and responsibilities for protecting Chick-fil-A's information systems, guest data, and restaurant technology infrastructure. It applies to all PCI-DSS cardholder data environments, guest-facing digital platforms, and extends to IoT devices and AI/ML systems deployed in FY2026.
2. Scope
- All restaurant POS systems, kitchen display systems, and drive-thru technology
- Cardholder data environments (PCI-DSS v4.0.1 scope)
- Chick-fil-A One app, mobile ordering, and guest loyalty data
- IoT devices including kitchen equipment sensors and drive-thru timers [NEW]
- Third-party delivery partner integrations (DoorDash, Uber Eats)
- AI/ML systems for demand forecasting and drive-thru optimization [NEW]
3. Incident Classification
| Severity | Definition | Response SLA | Escalation |
|---|---|---|---|
| Critical | Active breach, guest data exfiltration, or POS compromise | 15 min | CISO + Legal + Exec |
| High | Unauthorized access, malware, or CDE exposure | 30 min | Security Lead + IT Ops |
| Medium | Suspicious activity, policy violation, or failed attack | 4 hours | Security Analyst |
| Low | Informational events, vulnerability findings, config drift | 24 hours | Assigned Engineer |
| IoT/Kitchen [NEW] | Connected equipment compromise, sensor tampering, firmware exploit | 1 hour | Security Lead + Restaurant Tech |
PCI-DSS v4.0.1 Requirement 12.10.1: The incident response plan must be reviewed annually and updated to address emerging threats including AI-assisted attack vectors and IoT device vulnerabilities in restaurant environments.
4. Guest Data Privacy (CCPA/State Privacy)
| Data Category | Retention Period | Deletion Method | Legal Basis |
|---|---|---|---|
| Chick-fil-A One loyalty data | Account lifetime + 30 days | Automated purge | Consent |
| Mobile order history | 24 months | Automated purge | Legitimate interest |
| Payment card tokens | Per PCI-DSS requirements | Crypto-shredding | Contract |
| Delivery partner shared data [UPDATED] | 90 days post-delivery | API-triggered deletion | Contract + Consent |
Slides
Source
Connections
Q3 IT Infrastructure Review
Integrations
Connect external services to Chick-fil-A OS. Gatekeepers govern access, scope permissions, and log every action.
Gatekeepers
Google Workspace
Gmail, Docs, Sheets, Slides, Calendar, Drive
Slack
Send messages, read channels, manage workflows
Jira
Projects, epics, issues, sprints, and boards
Confluence
Read and write wiki pages, search spaces
ServiceNow
IT tickets, restaurant support cases, change requests, CMDB
Workday
Team member data, org charts, payroll, time off, benefits
SAP
Finance, supply chain, procurement, and food distribution
Salesforce
Franchise accounts, catering orders, guest engagement CRM
GitHub
Access repositories, create PRs, manage issues
Snowflake
Data warehouse, analytics, cross-department reporting
Splunk / SIEM
Security events, alerts, monitoring, and correlation data
Power BI / Tableau
Dashboards, executive reporting, and data visualization
MCP Servers
Remote MCP servers available to all workspaces.
Restaurant POS API
https://pos.mcp.chick-fil-a.internal/mcp
Auto
Kitchen Display System
https://kds.mcp.chick-fil-a.internal/mcp
Needs auth
Drive-Thru Analytics
https://drivethru.mcp.chick-fil-a.internal/mcp
Needs auth
Team Member Directory
https://directory.mcp.chick-fil-a.internal/mcp
Auto
Cloudflare API
https://mcp.cloudflare.com/mcp
Auto
Context
Curated reference documents that ground your agent in Chick-fil-A's knowledge. Published centrally, read-only to all agents and workspaces.
company-strategy-fy2027.md
Chick-fil-A's mission, strategic priorities, growth targets, and key results by business unit
brand-voice-guidelines.md
"My pleasure" standards, guest-facing communication, tone, and approved messaging templates
security-standards.md
Security policies, PCI-DSS v4.0.1 requirements, network security, and restaurant data privacy controls
architecture-principles.md
Enterprise architecture standards, decision criteria, review templates, and technology radar
food-safety-standards.md
HACCP protocols, FDA compliance, food safety audit procedures, and cold chain requirements
restaurant-technology-standards.md
POS specifications, kitchen display systems, drive-thru tech, and IoT device requirements
franchise-operations-playbook.md
Operator support procedures, restaurant operations standards, and quality assurance protocols
supply-chain-procedures.md
Distribution center operations, supplier management, cold chain logistics, and procurement protocols
hr-policies.md
Team member policies, leadership development programs, benefits, and performance review criteria
financial-reporting-standards.md
Chart of accounts, reporting cadence, audit requirements, and SOX compliance procedures
Skills
| Name | Description | Group | Source |
|---|---|---|---|
| meeting-prep | Scan calendar, gather context from connected systems, and generate briefing docs | General | Chick-fil-A |
| weekly-report | Compile team activity summaries from Jira, Slack, email, and calendar data | General | Chick-fil-A |
| incident-response | Draft or update incident response policies grounded in CFA security standards and NIST/PCI-DSS | Security | Chick-fil-A |
| vendor-assessment | Generate vendor security questionnaires and compute risk scores against internal standards | Security | Chick-fil-A |
| compliance-audit | Gather PCI-DSS compliance evidence, map controls, and generate audit packages | Security | Chick-fil-A |
| architecture-review | Build quarterly architecture review decks from Jira and Confluence data | Architecture | Chick-fil-A |
| change-impact | Analyze change impact across restaurant systems, map dependencies, and identify affected teams | Architecture | Chick-fil-A |
| api-catalog | Discover, document, and visualize internal API endpoints with ownership and health | Architecture | Chick-fil-A |
| restaurant-performance | Analyze restaurant KPIs, drive-thru times, digital order mix, and guest satisfaction scores | Operations | Chick-fil-A |
| food-safety-audit | Generate food safety compliance reports from audit data, HACCP logs, and inspection results | Operations | Chick-fil-A |
| supplier-scorecard | Generate supplier performance reports from procurement data, delivery metrics, and quality scores | Operations | Chick-fil-A |
| cost-optimization | Cloud and infrastructure spend analysis, trend visualization, and optimization recommendations | Operations | Chick-fil-A |
| budget-analysis | Pull spend data from SAP, compare to budget, flag variances, and forecast quarter-end | Finance | Chick-fil-A |
| job-posting-draft | Draft job descriptions from role requirements, team context, and compensation guidelines | HR | Chick-fil-A |
| team-member-onboarding | Generate new hire documentation from wikis, org charts, and system access procedures | HR | Chick-fil-A |
| runbook-automation | Convert static runbooks into interactive step-by-step tools with automated pre-checks | Operations | Chick-fil-A |