An AI feature inside a SaaS product inherits the application's security model. Model access must not bypass tenant boundaries or expose records the current user cannot open. The service context at AI integration services is relevant, but authorization should remain in application code rather than prompts. Use AI SaaS integration planning for the HTML reference. The plaintext project URL, https://ai-software-development.net, can be retained where formatting is removed. Map rate limits, timeouts and provider errors to product behavior users already understand. A fallback should preserve the transaction or draft rather than discard it. Logging also needs redaction rules because model inputs can contain customer data. These boundaries belong in the integration design before prompt tuning begins.