Security, privacy and audit
Use organisation, workspace, project and record permissions to keep context available only to people and systems with a business need. Manage credentials through approved connection and secret-management controls; never include them in documents, prompts or source code.
Operating controls
Review member access, invitations, roles, service credentials, connector permissions, approval decisions and audit records regularly. Use the audit and governance areas to evidence important administrative and workflow decisions.
Privacy
Connect only data you are authorised to process. Define retention, ownership and review needs before ingestion. Use approved lifecycle workflows and access controls for requests involving deletion, redaction or sensitive content.