Security & privacy

Your work.
Your boundaries.

Give Prism the context to help.
Keep control of what is shared.

A private thought after a meeting. A client history your team shares. The knowledge that makes your company yours. Voice keeps these access boundaries in place as Prism helps you work.

Meeting note

Pilot debrief

Oakline Freight
Pilot rollout

Today at 16:30 · EN

Summary

Carol confirmed the 40-seat pilot and two on-site training days. John owns the security review. Send the revised quote and pilot plan by Friday.

Next steps

  • Confirm what John needs for the security review.
  • Send Carol the revised quote by Friday.
Only you can access this note.

Kept off shared client timelines and out of CRM sync.

The same note, with different sharing settings.

Access follows
the work.

Prism only uses information the person asking is allowed to see. Asking by voice, opening a shared task, or mentioning a teammate does not unlock unrelated private material.

Each company’s data is kept in a separate environment, with access restricted to that organization. Another company’s account cannot access your records.

How Prism works with your context
Private notes & meetings
Only the owner can access them. They stay off shared client and pipeline views and are excluded from CRM sync.
Shared client work
Share through a client or pipeline, with selected teammates, or with your company. Access comes from those sharing settings.
Comments & mentions
People with access can collaborate on the item. A comment, reply, or mention does not make a private record public.
Emails & task references
Attach the source so the work has context. A reference to an email or file does not grant access to the original.

Keep the conversation.
As a transcript and note.

Neither meeting capture nor voice notes store audio. Keep the transcript and note, with the context and next steps ready to use. Meeting audio is processed live with zero retention upstream, and no meeting video is stored.

Start capture from your own computer, or invite a visible notetaker through a meeting link or calendar event. You choose which meetings to capture and which records to keep private.

Share a meeting when your team needs it. Inline comments, replies, and tasks keep the follow-up connected to the relevant words, within the meeting’s access settings.

Explore meeting capture and collaboration
Live meeting
Transcription

Oakline pilot review

Saved meeting record

Transcript

Carol Susi “I’ll introduce John for the security review this week.”

You “I’ll send the revised quote and pilot plan by Friday.”

Meeting note

40-seat pilot. Two on-site training days. John leads the security review.

Next steps

  • Introduce John this week.
  • Send the quote by Friday.
Transcript and note retainedNo stored meeting audio or video
Meetings and voice notes keep the written record.
Neither stores audio.

Control in the places
you actually work.

The email you open and the action you delegate both deserve a clear boundary. Protection and review belong in the workflow.

Inbox
Your pilot follow-up

Hi Alex, here is the plan from today’s conversation.

Remote image blocked
3 trackers blockedImages are off

Read the email. Keep the protection.

Known tracking pixels and tracker URLs are removed before display. Remote images stay blocked until you load them or trust the sender. Known trackers remain blocked either way.

Email content is displayed in a sandbox with scripts disabled. Private threads stay with you and the people on the emails.

Explore inbox protection
An instruction for Operator
“Prepare customer replies for review. Ask me before changing pricing or contractual terms.”
PrepareReviewDecide

Decide what gets done for you.

Operator brings the sources and prepared result together. Read the draft, inspect a proposed update, make a change, or skip it before an action goes ahead.

Use Company DNA to define what can run automatically, where a person must decide, and when Operator should ask. Refine the process as it learns from your corrections.

Review an example in Operator

Your Company DNA
stays internal.

Prism learns how your team works: what a useful note needs, which questions to ask, and how Operator should handle a task. Your playbooks, pricing rules, and learned processes stay within your company’s access controls.

Directors and process owners can guide that learning. Reinforce a good approach, correct a mistaken lesson, or define a new review point. Shared standards give the team direction; private sources keep their existing access.

Other organizations do not get access to your Company DNA or workspace.

Explore Company DNA and its controls
Your companyAccess controlled

Company DNA

The way your team works

Note standards
Capture the owner, deadline, and next step.
Operator instructions
Route pricing exceptions for review.
Lessons from corrections
Separate confirmed revenue from pipeline.
Private notes and sources keep their access.
An illustration of company knowledge and its access boundary.
Shared instructions do not make private sources public.

The details behind
the boundaries.

Company separation, protected connections, and device controls support the way the workspace handles your information.

Company separation
A separate data environment for each company.

Every request is tied to the company it belongs to, keeping your organization’s records separate and inaccessible to other companies.

Protected connections
TLS at the service edge.

Connections to the service are protected in transit. Ask us for the encryption scope required by your security review.

Connected account credentials
Sealed at rest with AES-256-GCM.

Mailbox and calendar credentials use rotatable key identifiers. This control applies specifically to those credentials.

Desktop credentials
Tokens stored in the OS keychain.

The desktop app uses the operating system’s credential storage for its access token.

Session control
Review and revoke active sessions.

See your signed-in sessions in Settings and revoke a session you no longer want to keep active.

Hosting that fits your requirements.

Tell us where your company needs its data hosted. We will confirm the available options and residency commitments for your plan in writing.

  • USUnited States
  • DEGermany
  • SGSingapore
  • JPJapan

Enterprise deployment.

Bring your requirements for a secure enclave, additional hosting options, or your own storage. We will map the configuration, responsibilities, and contractual scope with your team.

Discuss your deployment

A few practical details.

Can my manager or teammates see a private note?

A private note is accessible only to its owner. It stays off shared client and pipeline views and is excluded from CRM sync. Shared notes follow the access granted through the client, pipeline, company, or direct sharing.

Does Prism have more access than the person asking?

No. Prism works with information that person is allowed to see. A shared task, an email reference, or a mention does not unlock unrelated private notes, recordings, or messages.

Do meetings or voice notes store audio?

No. Neither meeting capture nor voice notes store audio. The saved record is the transcript and note. Meeting audio is processed live with zero retention upstream, and meeting video is not stored either.

Can another company access our company data?

No. Your company’s data is kept in a separate environment, with access restricted to your organization. Other companies cannot access your notes, emails, client records, or Company DNA. Within your company, each person’s permissions determine what they can see.

Can we decide which tasks run automatically?

Yes. Define what Operator prepares, what it can execute automatically, and when it should stop for a person to decide. Company DNA gives it those instructions. Review the sources and prepared work, refine the result, and improve the process over time.

What about meeting consent?

Desktop capture starts from your computer; a meeting notetaker joins visibly through a link or calendar event. Your team is responsible for the notices and consent needed for each meeting. We can discuss your capture policy during setup.

How do we review retention, deletion, and certifications?

Send us your requirements for a written review of the relevant data types, retention and deletion terms, subprocessors, encryption scope, and current certification documentation. A DPA is available during procurement. Hosting and Enterprise commitments should be agreed in your contract.

Bring your security team.
And the detailed questions.

Share your questionnaire, data requirements, and deployment constraints. We will walk through the product controls and confirm the scope in writing.

Useful to include

  • The region and hosting setup you need
  • Your retention and deletion requirements
  • Required controls and procurement documents
  • The tools and data you want to connect

Questions about personal data?
[email protected]