Security pages are often written to impress. This one is written to inform. Here is how access works, what we record and what we choose not to keep.
Roles
Every person has one of four roles: owner, admin, member or guest. Guests only see what they are invited to. Roles can be changed at any time, and changes take effect immediately.
The audit log
On the Scale plan, the audit log records who did what and when: sign-ins, permission changes, exports and deletions. It records the action, the person and the time. It does not record the content of your items.
What we do not store
- Passwords, in any recoverable form.
- The contents of files you connect from other tools, beyond what is needed to show them.
- Advertising identifiers or third-party tracking data.
Sign-in
Single sign-on and two-step sign-in can be required for the whole workspace. We recommend turning both on for every team of more than five people.
Have a question we have not answered? Write to us and we will add it here.