Account security, privacy, and audit logs

Protect your workspace

1. Use individual teammate accounts, verify email, and grant appropriate roles rather than sharing owner credentials.
2. Follow password-change requirements and use the account's password recovery flow when needed. Review access when a teammate leaves.
3. Keep API keys, mailbox credentials, webhook secrets, and provider tokens out of knowledge files, public code, and screenshots.
4. Review document contents before uploading and export customer data only for an authorized purpose.
5. Review email retention and other available data controls with your business owner.

Inspect business activity

Open Business Audit Logs with audit-read access. Apply the offered filters and inspect actor, action, time, and affected record. Correlate events with a conversation, integration delivery, or workflow run before drawing conclusions.

Policies and requests

Read the published privacy policy, security information, and data deletion process. Use contact for a request or incident with sanitized details. This article does not assert certifications, guaranteed hosting location, or legal compliance beyond verified published commitments.

Expected result

Only intended teammates and systems retain access, and business actions can be investigated using the records available to your role.