Security and privacy

Use documentation examples only with test data. Do not paste secrets or real customer data into an article, the AI assistant, or a support request.

Secrets in examples

Examples must use obvious placeholders:

Token: <your-test-token>
Client ID: <your-client-id>
Webhook URL: https://example.com/webhook
  • Create separate credentials for a test environment.
  • Replace tokens, signatures, passwords, private URLs, and identifiers before publishing.
  • Do not use a value that resembles a real secret, even after it has been revoked.
  • Do not put a secret in a URL: it can appear in browser history, logs, or screenshots.
  • Keep secrets in your organization's approved secret store, not in code or article text.

If a secret is published accidentally, revoke or rotate it immediately. Removing it from the page is not enough.

Screenshots and diagnostics

Before sending a screenshot or log, hide:

  • customer names, phone numbers, email addresses, and messages;
  • tokens, cookies, authorization headers, and private links;
  • customer instance names and internal addresses;
  • payment, health, or other sensitive data.

A documentation report normally needs only a description, URL, language, and page revision. Do not send a complete log unless support asks for it.

AI assistant

Text you send to the portal's AI assistant is transmitted to the service to generate an answer. Do not enter secrets, customer personal data, or confidential material from your organization.

Portal storage and analytics

The portal uses essential local storage for your language, saved articles, privacy choice, and the AI session after you start it. These features are not used for advertising.

Optional PostHog analytics helps identify popular pages and searches. It is not loaded before you consent. Reject analytics or change your choice with Privacy in the lower corner.

For the full legal terms, read the ConnectiveOne Privacy Policy and Cookie Policy.

Report a vulnerability

Do not describe a suspected vulnerability in a public channel. Create a private request in Client Portal and state that it concerns security. Do not attach working credentials or customer data; the team will request the minimum details through an appropriate channel.