← All episodes

· Behind the Code

Scaling Secure AI: Turning Enterprise Data into Impact (Behind The Build with Tharani Part 2)

Summary

In the second part of the conversation, Tharani explains how an AI proof of concept becomes a production implementation inside a larger engineering organization. She covers architecture planning, security training, and the documentation needed to build stakeholder confidence. The discussion then examines an internal MCP server that supplies agents with task-specific data, the importance of structured inputs, and the value of documentation and hands-on learning for developers.

Key takeaways

  • Production requires supporting features, architecture decisions, and team feedback beyond the narrow scope of a proof of concept.
  • Build confidence in sensitive environments by explaining data flows and safeguards and following the organization’s security practices.
  • Tharani’s team uses an internal MCP server with specific tools to supply only the data an agent needs for its task.
  • A shared tool layer can support additional agents without rebuilding each integration from scratch.
  • Pay attention to input structure, prompts, and documentation, and learn new AI concepts through hands-on experiments.

Chapters

Choose a chapter to jump to that moment in the conversation.

  1. 0:00From proof of concept to production architecture
  2. 2:16Security training and stakeholder confidence
  3. 4:34Controlling agent data access with MCP
  4. 6:36Reusing the integration across agents
  5. 7:44Structured data, prompts, and practical lessons
  6. 10:01Documentation and advice for developers

Transcript

Transcript reviewed for accuracy. View the original conversation on YouTube ↗

It's not like building a front-end user

interface because it's pretty defined.

interface because it's pretty defined. Once you define it, the unknown is

Once you define it, the unknown is really like whether your user likes it

really like whether your user likes it or not or how they use it. But this is

or not or how they use it. But this is even at the core of implementation.

even at the core of implementation. There's a lot of variability and

There's a lot of variability and variation of quality and kind of

variation of quality and kind of reliability of that products itself. So

reliability of that products itself. So there's a lot of like iterative test

there's a lot of like iterative test that goes into

that goes into you're testing a lot of like uh it's

you're testing a lot of like uh it's very much a real R&D because you're

very much a real R&D because you're going through the process with like

going through the process with like first hypothesis this tech tech stack

first hypothesis this tech tech stack would result in this result or this

would result in this result or this outcome going through that exercise and

outcome going through that exercise and then once you do it you have a different

then once you do it you have a different result or it doesn't meet the needs of

result or it doesn't meet the needs of the the team. So you end up drawing

the the team. So you end up drawing board making changes and then coming

board making changes and then coming back again. So having done the proof of

back again. So having done the proof of concept and and you kind of have the

concept and and you kind of have the tech stack you understand what sort of

tech stack you understand what sort of inputs it needs to go in to get the

inputs it needs to go in to get the outputs and the infrastructure that

outputs and the infrastructure that needs to support it at a very small test

needs to support it at a very small test kind of package. Now what goes into

kind of package. Now what goes into production? How does how do you go from

production? How does how do you go from let's say having one or two PC's that's

let's say having one or two PC's that's getting approved by the team going okay

getting approved by the team going okay this results these results are pretty

this results these results are pretty good. What happens next?

good. What happens next? Okay. So once we are done with the P and

Okay. So once we are done with the P and the team is satisfied with the results

the team is satisfied with the results and we made the other the progress of

and we made the other the progress of involving the other features into the

involving the other features into the PC. So not into the system. So when we

PC. So not into the system. So when we are implementing PC we just uh took the

are implementing PC we just uh took the prioritized features but in the real

prioritized features but in the real system there will be other adjoining

system there will be other adjoining features as well that support that

features as well that support that specific feature. So we figured it out

specific feature. So we figured it out those kind of things and we figured it

those kind of things and we figured it out the technologies that we'll be using

out the technologies that we'll be using that we can use to implement those and

that we can use to implement those and we came up with the architecture diagram

we came up with the architecture diagram of the system and the technical

of the system and the technical architecture document for those systems

architecture document for those systems and we send those documents uh to the

and we send those documents uh to the team for the feedback and yeah it was

team for the feedback and yeah it was the progress. Okay,

the progress. Okay, you need to do all of this because it's

you need to do all of this because it's a pretty big company, right? It's has a

a pretty big company, right? It's has a pretty large revenue.

pretty large revenue. Yeah.

Yeah. Um I think it roughly has like 100

Um I think it roughly has like 100 something engineers. So lots of product

something engineers. So lots of product that are being simultaneously being

that are being simultaneously being built. How does atomic team actually

built. How does atomic team actually play well with all of that? Because

play well with all of that? Because there's a lot going on. It's a big

there's a lot going on. It's a big machine that's running already and as an

machine that's running already and as an outsider in with very short context

outsider in with very short context you're kind of coming in. There's a lot

you're kind of coming in. There's a lot of back and forth is what I'm what I'm

of back and forth is what I'm what I'm understanding, right? and you're having

understanding, right? and you're having to review and make sure that those those

to review and make sure that those those uh changes that you're making doesn't do

uh changes that you're making doesn't do anything negative to the existing system

anything negative to the existing system and then also you have to build it in a

and then also you have to build it in a safe way that it uh respects all the

safe way that it uh respects all the sort of the safety protocols that they

sort of the safety protocols that they have in place. Are there any um kind of

have in place. Are there any um kind of training you need to go through? Are

training you need to go through? Are there anything that you had to do to uh

there anything that you had to do to uh get yourself um approved uh to be able

get yourself um approved uh to be able to work within their environment? Was

to work within their environment? Was there anything that you had to do that

there anything that you had to do that way?

way? So they have a very secure environment.

So they have a very secure environment. So we went through a lot of security

So we went through a lot of security training they provided and on the other

training they provided and on the other hand so when we are providing a solution

hand so when we are providing a solution for the problem. So at the first there

for the problem. So at the first there was some hesitation from the team

was some hesitation from the team because AI is new and the people are not

because AI is new and the people are not much familiar with the AI and the

much familiar with the AI and the results and in this sensitive kind of

results and in this sensitive kind of environment. So most of the people are

environment. So most of the people are uh worry about the sensitivity of the

uh worry about the sensitivity of the data. So we were thinking to uh explain

data. So we were thinking to uh explain about what we are doing and how we can

about what we are doing and how we can handle the sensitivity of the data and a

handle the sensitivity of the data and a lot of things. So we have backto-back

lot of things. So we have backto-back meetings with the team and we wrote a

meetings with the team and we wrote a lot of documents explaining what we can

lot of documents explaining what we can do to secure the data and what the AI

do to secure the data and what the AI model will consume in sake of the in

model will consume in sake of the in sake of implementing the system and all.

sake of implementing the system and all. So it was a tough progress to explain

So it was a tough progress to explain the things but we were finally

the things but we were finally successfully achieve the thing and we

successfully achieve the thing and we were able to convince them about using

were able to convince them about using the AI in their project successfully.

the AI in their project successfully. Yeah.

Yeah. Yeah. It's it's pretty scary right like

Yeah. It's it's pretty scary right like all the data that you used to have

all the data that you used to have at least in the context of

at least in the context of what people understand about AI

what people understand about AI especially if you're now thinking about

especially if you're now thinking about like you know plugging into an API

like you know plugging into an API that's actually just calling an external

that's actually just calling an external service. uh that's very risky and that's

service. uh that's very risky and that's not exactly the implementation you did

not exactly the implementation you did because obviously for the safety reasons

because obviously for the safety reasons you end up building it internally had a

you end up building it internally had a lot of controls uh but that's what

lot of controls uh but that's what people understand when it comes to AI

people understand when it comes to AI implementation and and it seems very

implementation and and it seems very scary what helped them you said a lot of

scary what helped them you said a lot of documentation that helped them to

documentation that helped them to understand was there anything else that

understand was there anything else that you had to show for or do that that

you had to show for or do that that helped them be more comfortable build

helped them be more comfortable build the trust with the solution that we were

the trust with the solution that we were that you were building

that you were building yeah so we did one good implementation

yeah so we did one good implementation That's the MCP server. So for the AI

That's the MCP server. So for the AI agents, we have to pull up the data that

agents, we have to pull up the data that need to be processing. So for example,

need to be processing. So for example, if we have to build some advising

if we have to build some advising questions for the students. So we have

questions for the students. So we have to get the data related to student and

to get the data related to student and send it to AI model to process or

send it to AI model to process or generate a question. So there was a

generate a question. So there was a concern about pulling the data from

concern about pulling the data from their internal database because it's

their internal database because it's very sensitive and not. So we came up

very sensitive and not. So we came up with a solution of implementing the MCP

with a solution of implementing the MCP server which which is the model context

server which which is the model context protocol of providing what exactly the

protocol of providing what exactly the AI system need for the processing or the

AI system need for the processing or the for the system. So we built it built

for the system. So we built it built this server by using the APIs they have

this server by using the APIs they have given to fetch the data from their

given to fetch the data from their database and we built specific tools

database and we built specific tools that we need for the purpose of the

that we need for the purpose of the agents. So the agents now will get only

agents. So the agents now will get only the data they need nothing less or

the data they need nothing less or nothing more. So we are sending the

nothing more. So we are sending the appropriate structured data to the AI

appropriate structured data to the AI agent through this MCP server. So it's

agent through this MCP server. So it's very convenient and it's very secure

very convenient and it's very secure also. Yeah,

also. Yeah, that's very interesting to hear because

that's very interesting to hear because MCP is the all the rage right now across

MCP is the all the rage right now across all platforms. every single product

all platforms. every single product that's has any like external API they're

that's has any like external API they're making that whole function uh enabled on

making that whole function uh enabled on MCP so that all LM models can access it.

MCP so that all LM models can access it. to give context to build API

to give context to build API integration. It's custom. It's custom

integration. It's custom. It's custom integration for two applications to

integration for two applications to communicate with each other. With MCP,

communicate with each other. With MCP, it's kind of a universal plug-and-play

it's kind of a universal plug-and-play where you have kind of a set standard

where you have kind of a set standard protocol and then and that defined

protocol and then and that defined protocol is a kind of uni universally

protocol is a kind of uni universally accept acceptable

accept acceptable now by all the models that are out there

now by all the models that are out there that wants to integrate with them. So

that wants to integrate with them. So this approach that you went about doing

this approach that you went about doing it's actually for internal use case.

it's actually for internal use case. It's not even external. So all the data

It's not even external. So all the data endpoints that you're building, it's

endpoints that you're building, it's actually for within the platform of this

actually for within the platform of this company.

company. It is not going outside of it. And the

It is not going outside of it. And the benefit here is actually the controls

benefit here is actually the controls you have uh and and it's much safer

you have uh and and it's much safer approach.

approach. And also for the other AI agents we'll

And also for the other AI agents we'll be building in feature, we can use the

be building in feature, we can use the same NCP server to fetch all the

same NCP server to fetch all the necessary information we need. So we

necessary information we need. So we don't need to build separate server or

don't need to build separate server or separate APIs for each of the AI agents

separate APIs for each of the AI agents but we can use the same MCP server and

but we can use the same MCP server and in future future if we need more tools

in future future if we need more tools or if we need more data we can add more

or if we need more data we can add more tools to the MCP server that can serve

tools to the MCP server that can serve the purpose for the other agents.

the purpose for the other agents. So build once and deploy across

So build once and deploy across that's amazing. So that's like the

that's amazing. So that's like the biggest unlock for internal application.

biggest unlock for internal application. how you can kind of scale very quickly

how you can kind of scale very quickly without having to do these individual

without having to do these individual connections that you were you would

connections that you were you would normally have to do otherwise.

normally have to do otherwise. Yeah.

Yeah. Okay. Amazing. Um is there a lesson that

Okay. Amazing. Um is there a lesson that you had across this whole project that

you had across this whole project that you want to share

you want to share when we are dealing with the AI? So we

when we are dealing with the AI? So we always make sure about the security of

always make sure about the security of the data as the first point and we have

the data as the first point and we have to send only the necessary information

to send only the necessary information to the AI without sending nothing more

to the AI without sending nothing more or nothing less to the concept and the

or nothing less to the concept and the other one is the structure of the AI

other one is the structure of the AI structure of the data we are sending to

structure of the data we are sending to the AI. But if we are sending an

the AI. But if we are sending an unstructured data or semistructured

unstructured data or semistructured data, there will be a lot of problems

data, there will be a lot of problems like hallucination and uh the uh not not

like hallucination and uh the uh not not uh the quality of the output won't be

uh the quality of the output won't be that much good as we expect. So we

that much good as we expect. So we always consider about the structure of

always consider about the structure of the data we are sending and always

the data we are sending and always consider about good prompt because we

consider about good prompt because we have to make sure about the prompt

have to make sure about the prompt engineering and we have to use the right

engineering and we have to use the right tools to create the prompts and u make

tools to create the prompts and u make the AI to work more efficiently.

the AI to work more efficiently. So it goes we'll go on to our next

So it goes we'll go on to our next section which is the lightning round. So

section which is the lightning round. So you just take a second to respond. Not

you just take a second to respond. Not not much more explanation is needed. We

not much more explanation is needed. We have about few questions we just want to

have about few questions we just want to run through. So one piece of tech that

run through. So one piece of tech that you can't live without.

you can't live without. It's tough. Um at the current point I

It's tough. Um at the current point I can say AI tools because even with the

can say AI tools because even with the work and for my personal use I'm using a

work and for my personal use I'm using a lot of AI tools specifically uh for to

lot of AI tools specifically uh for to create the documentation or to

create the documentation or to brainstorm what I'm thinking related to

brainstorm what I'm thinking related to work and there are a lot of technologies

work and there are a lot of technologies that are emerging. So instead of going

that are emerging. So instead of going through the articles and all I usually

through the articles and all I usually go to the AI and did a brain quick

go to the AI and did a brain quick brainstorm about what I'm thinking and

brainstorm about what I'm thinking and what's the solution that can be useful

what's the solution that can be useful by using these new emerging tools and

by using these new emerging tools and all. So there are a lot more to come but

all. So there are a lot more to come but I am currently very much excited about

I am currently very much excited about this thing. Yeah.

this thing. Yeah. What's a tech trend that you're excited

What's a tech trend that you're excited about right now? If I'm considering

about right now? If I'm considering anything related to AI, maybe I am more

anything related to AI, maybe I am more excited about the agentic AI system

excited about the agentic AI system because from the articles I read, it's

because from the articles I read, it's more about like a human like we think

more about like a human like we think the AI can alo also think. So they can

the AI can alo also think. So they can act according to the context they can

act according to the context they can derive to a solution based on the

derive to a solution based on the specific goals and all. So I'm more

specific goals and all. So I'm more excited how it will work and also more

excited how it will work and also more excited how we are going to build it.

excited how we are going to build it. What is a underrated skill for a

What is a underrated skill for a software developer?

software developer? I would say writing a good documentation

I would say writing a good documentation because when we are rushing with the

because when we are rushing with the work we didn't uh know about the value

work we didn't uh know about the value of good documentation but if we have a

of good documentation but if we have a document good documentation it will be

document good documentation it will be useful to onboard new stuffs and also it

useful to onboard new stuffs and also it will be useful if we want to revise

will be useful if we want to revise something that we did past. So it's very

something that we did past. So it's very helpful and also if you learn any new

helpful and also if you learn any new things it good it's good if we document

things it good it's good if we document it because instead of going around in

it because instead of going around in the web to search about the new things

the web to search about the new things again it's good if we have the already

again it's good if we have the already taken notes we can really grab the

taken notes we can really grab the things yeah

things yeah where do you document your thoughts

where do you document your thoughts so mostly I'm using the Google docs

so mostly I'm using the Google docs because I can invite the other team

because I can invite the other team members to put up their thoughts through

members to put up their thoughts through the collaborations and all also we can

the collaborations and all also we can comment the other documents as

comment the other documents as So for me, Google Docs is a helpful one.

So for me, Google Docs is a helpful one. Yeah.

Yeah. And final closing thought to the

And final closing thought to the developers out there who are still at

developers out there who are still at the edge of thinking about experimenting

the edge of thinking about experimenting with AR, curious, they might they might

with AR, curious, they might they might be even listening to this podcast just

be even listening to this podcast just so that they can get uh kind of used to

so that they can get uh kind of used to the concept and understand how to go

the concept and understand how to go about doing it. What advice would you

about doing it. What advice would you give them? So I would stay I would say

give them? So I would stay I would say start by curious like put your interest

start by curious like put your interest on AI and start by working not just by

on AI and start by working not just by reading but also with some hands-on

reading but also with some hands-on exercise. So if you came across any new

exercise. So if you came across any new concept just put some rough coding and

concept just put some rough coding and play around with the c code and all they

play around with the c code and all they have given in the documentation and also

have given in the documentation and also always treat AI as your companion not as

always treat AI as your companion not as a competition because with the help of

a competition because with the help of AI you will be able to build your

AI you will be able to build your expertise a lot and you'll be able to

expertise a lot and you'll be able to shine in your work.

shine in your work. I love that. Don't uh have I as your

I love that. Don't uh have I as your competition but as you

competition but as you Yeah,

Yeah, I like that. Awesome. Thank you so much

I like that. Awesome. Thank you so much for your time. authing

and kind of uh I think I think really

exciting in terms of where everything is

exciting in terms of where everything is headed especially with the type of work

headed especially with the type of work that we're doing atomic as well. So

that we're doing atomic as well. So thank you so much for sharing your

thank you so much for sharing your thoughts and your experience. We'll talk

thoughts and your experience. We'll talk to you soon.

to you soon. Thank you so much.

Thank you so much. If today's story resonated with you I'd

If today's story resonated with you I'd love to hear from you. Who should we

love to hear from you. Who should we bring next on our behindthebuild series?

bring next on our behindthebuild series? Send us your suggestions at btbat

Send us your suggestions at btbat atomicbuild.com or connect with me on

atomicbuild.com or connect with me on LinkedIn. We're always on the lookout

LinkedIn. We're always on the lookout for the next great building story to

for the next great building story to share. And if you're facing your own

share. And if you're facing your own technology challenges, whether it's AI

technology challenges, whether it's AI exploration, custom development, or

exploration, custom development, or scaling your own platform, let's talk.

scaling your own platform, let's talk. At Atomic Build, we specialize in this

At Atomic Build, we specialize in this space. And thanks for joining us on

space. And thanks for joining us on Behind the Build. Until next time, keep

Behind the Build. Until next time, keep building.

More episodes