Security, privacy, and governance

Protect identities

Strong identity is the foundation of workspace access.

• Verify email addresses and keep recovery information current.
• Use passkeys or multi-factor authentication where available.
• Do not share accounts or invitation links.
• Remove access promptly when a person leaves.
• Review active sessions and administrator access.

Protect data

Use the product designed for the sensitivity and lifecycle of the content.

• Keep secrets out of notes, chat, code examples, and screenshots.
• Use governed records for regulated information.
• Apply retention, export, deletion, and legal hold controls consistently.
• Grant API keys the minimum scopes and rotate them after exposure.
• Review audit history for material administrative changes.

Respond to an issue

If you suspect unauthorized access or data exposure, revoke the affected session, invitation, or API key first, preserve relevant request IDs and timestamps, and contact your administrator or Patvero support.