Data security and privacy
Who can see what: permissions are enforced by the backend
GDDAO restricts data access at the workspace or organization, project, and folder levels. The backend validates and enforces these permissions; access does not depend only on whether a button is visible in the interface. When AI helps organize information, it can only access the scope you have authorized at that moment. Knowing that data exists does not grant access to it.
File uploads and storage
- Large files upload directly to cloud storage instead of passing through the application server as a complete package, reducing the risk of failed uploads;
- Privacy and sharing scopes can be configured for folders and individual files;
- GDDAO backend services and cloud storage retain formal data. It does not exist only inside a temporary AI execution environment.
Authorization before AI reads data
- AI in a standard project conversation is limited to the workspace and project scope authorized for that conversation;
- Tag AI in team conversations has narrower tool permissions and does not automatically read the entire workspace;
- External actions, such as using a connected Google service to read email or create a calendar event, require stricter confirmation and are not performed automatically without approval.
Account security
- Sign in with email or phone verification, Google, or Apple;
- Secure sessions support sign-out and role switching;
- Review authorized connections to Google and other external services regularly, and revoke access you no longer need.
System reliability
- Important background work, including document parsing and AI tasks, displays processing status and supports retries. A failure is clearly marked rather than disappearing silently;
- The platform continues to strengthen data retention and deletion policies, disaster recovery, and fine-grained external service connection management. This page will be updated as those mechanisms become available.
What to do if you have concerns
If data access differs from your expectations or you have a security concern, see Troubleshooting or ask your workspace administrator to review the permission settings.