Skip to main content
Governance

Enterprise Security Built In

Secure workspaces, role-based access, knowledge isolation, audit trails, and enterprise-grade protection keep your information safe.

Workspace boundary

Tenant identity flows through auth, API access, collections, chatbot scope, the operator inbox, and every embedded experience. There is no path that crosses it.

Knowledge boundary

Knowledge Spaces group departments or functions; Collections stay the retrieval units, so each agent answers only from what it is scoped to.

Verified-domain SSO

Public-email users create or join invite-only workspaces. SSO and enterprise auto-routing require verified DNS ownership before a domain becomes a workspace signal.

ONE WORKSPACE — SEALED FROM EVERY OTHERPUBLICproduct-docshelp-centerSERVES: WEBSITE WIDGETANONYMOUS VISITORSPRIVATEinternal-policycontractsSERVES: SIGNED-IN STAFFNEVER THE PUBLIC WIDGETNO CROSSOVERACCESS PATHSVISITORREGISTERED ORIGIN ONLYMEMBERSSO OR PASSWORDOPERATORWORKSPACE ADMIN