Fully private
A space stays with the people you name. Nothing leaves that circle.
Security
Permissions follow the source.
Nobody sees a source they are not entitled to. Anything derived carries the same limit.
01
Three ways to share.
Fully private, partly shared, or open. Nobody sees a source they are not entitled to.
Partly shared
Teams gain from each other’s patterns while their sources stay confidential.
Open
Shared across your organization.
Fully private
- Owning team only
- Sources and everything derived stay inside
Partly shared
- Patterns help nearby teams
- Sources stay confidential
Open
- Shared across the organization
02
Access follows the org.
Access control at knowledge-base, department, and hierarchy levels, plus fully isolated spaces.
Combined roles
Someone with several roles gets the combined access of all of them.
Isolated spaces
A space can be cut off from the rest of the organization when it must be.
Same everywhere
Upload, clipper, Teammate, and agents all honor the same access.
03
All the way down.
Anything Cluesora derives from a source carries that source’s permissions, all the way down.
Lessons inherit
A generated lesson, quiz, or illustration keeps the permissions of the pages it came from.
Answers inherit
An answer never shows a line from a source the reader cannot open.
No extra sight
No one sees more than the source allows.
The source
- Contract terms.pdf — Legal only
made from
Everything made from it
Each carries the source's limit
- SummaryLegal only
- Quiz questionLegal only
- Teammate answerLegal only
- Agent search resultLegal only
same limit
Who asks
- Someone in Legal → sees all four
- Someone in Sales → sees none
- An agent → sees what its person can
04
Agents wear your badge.
An AI agent gets exactly the permissions of the person who connected it.
Same as the person
If they cannot see a source, the agent cannot see it either.
Teammate follows you
Teammate follows each person’s permissions. On Slack and Teams, only linked accounts can talk to it.
Revoke any time
Revoke a connected agent under Profile → Connected agents.
Before
One connected agent can see every space in the organization.
After
The agent sees only what the person who connected it can see.
05
Shared SaaS or hybrid cloud.
Run on Cluesora’s shared SaaS, or run hybrid with your data plane inside your organization. Either way, the control plane is shared.
Shared SaaS
Hosted by Cluesora, with region-pinned data residency.
Hybrid cloud
Your data plane stays inside your organization. The control plane stays shared, run by Cluesora.
Activity logged
Workspace activity is logged.
Shared SaaS
Cluesora cloud · region-pinned
- Control plane — shared
- Data plane — your content and the map
Hybrid cloud
Cluesora cloud
- Control plane — shared, run by Cluesora
Inside your organization
- Data plane — your content and the map
- Encrypted in transit and at rest
- Activity logged
- SSO · SAML · OIDC · SCIM on Pro
06
Encrypted and logged.
Encrypted in transit and at rest. Activity is logged.
In transit and at rest
Encrypted while it moves and while it is stored.
Activity logged
Workspace activity is logged. Agent reads and writes are logged too.
Sign-in
SSO, SAML, OIDC, and SCIM are standard.
07
History you can open.
You can see what a procedure said on a date and who changed it.
Never deleted
New versions take over. Old ones are kept and dated, never deleted.
Sources stay original
Sources are never rewritten. Every answer traces to its origin.
Anyone can correct
Anyone can correct what is wrong, and their edit wins. Unclear calls are checked first.
- 12 March
Refunds are processed within 30 days.
Changed by the support lead - 3 January
Refunds are processed within 14 days.
Kept, dated, still readable
08
Works today, and planned.
Every way in gets the same checks and the same permissions.
Works today
PDF and Markdown upload, Chrome clipper, Confluence import, MCP agents, and Teammate in Slack and Teams.
Slack and Teams
Cluesora’s Slack and Teams agent is on Pro. Only linked accounts can talk to it.
Reads not metered
Reading is never metered, for people or for MCP agents.
Works today
- PDF and Markdown upload
- Chrome clipper
- Confluence import
- MCP agents
- Teammate in Slack and Teams
Planned
- Jira
- GitHub and other code hosts
09
We name the limits.
Being production-ready does not mean every governance question is solved.
Formats today
PDF and Markdown upload today. More formats are coming.
Planning is coming
Planning a learning goal into weekly slots is coming. It is not available now.
Unclear calls wait
Unclear calls get checked before they change anything. That is not a claim that every case is solved.
Ask us
If a control you need is not on this page, it is not a silent yes. Ask us.
Questions people ask.
Can a person see a source they are not allowed to open?
No. Anything derived from a source carries that source’s permissions, all the way down.
What can a connected agent see?
Exactly what the person who connected it can see. No more.
Can data stay inside our organization?
Yes. With hybrid cloud your data plane stays inside your organization and the control plane is shared. Or use the shared SaaS, with region-pinned data residency.
Do you read our Slack or Teams channels?
No. Teammate answers when asked. Only people an admin has linked to a real account can talk to it.
What if our paid plan ends?
You fall back to Free. Nothing is deleted.
What should a reviewer treat as not available?
Jira, email, GitHub, weekly learning planning, and formats beyond PDF and Markdown. Those are planned or coming.