Security starts with clear boundaries.
Understand how access and document handling are designed, what you should check before sharing sensitive material, and how to report a problem.
Account access
Your account and workspace determine which saved reviews you can access. Keep your sign-in details and integration credentials private.
- When connecting the desktop app, check the account shown in the confirmation before continuing.
- Use your own account rather than sharing a session token or API key.
- Report an unexpected sign-in or workspace access problem through Contact.
Documents and browser content
Submit only the material you intend to review. Files and extracted text may be processed by the verification service and its configured providers.
- Document extraction uses file and text limits and a separate parser process. These controls do not make a hostile file harmless.
- Browser automatic-review features have separate opt-ins. Review them before enabling capture.
- Remove unnecessary personal or confidential information before submitting a document.
Before a sensitive deployment
Security requirements depend on the deployment and the information being processed. Request the details that matter to your organization.
- Confirm provider processing, access controls, retention, and deletion requirements.
- Request current deployment and audit evidence for any required assurance.
- This page does not assert an independent certification or guarantee that every vulnerability has been eliminated.
Have a security question?
Describe the workflow and the safeguards your team needs.