Question 1

How is my data encrypted?

Accepted Answer

Clear Ideas uses multiple layers of encryption: AES-256 encryption for data at rest, TLS/SSL for all data in transit, and application-level encryption for extracted content. Encryption keys are managed in a secure key management service with periodic rotation. All content is encrypted before storage, making it unreadable to Clear Ideas staff or systems.

Question 2

What is application-level encryption?

Accepted Answer

Application-level encryption means all extracted document content is encrypted at the application layer before storage. Clear Ideas can perform AI-powered vector search on encrypted data without ever decrypting the actual content. File titles remain unencrypted for full-text search efficiency, but all document contents stay encrypted and inaccessible even to platform administrators.

Question 3

How do Role-Based Permissions work?

Accepted Answer

Clear Ideas provides six distinct user roles with specific capabilities: Owner (full control), Admin (manage settings and users), Editor (modify all content), Uploader (contribute new files), Downloader (view and save offline), and Viewer (read-only, no downloads). Permissions are site-scoped, meaning users have different roles on different sites. This granular control ensures the principle of least privilege.

Question 4

Can I control who downloads versus who only views documents?

Accepted Answer

Yes, this is a core security feature. Viewers have read-only access to documents in-app without download capabilities. Downloaders can view and save files offline. This distinction is critical for VDR scenarios where you want external parties to review documents but limit their ability to retain copies. In-app viewing keeps content within the secure environment.

Question 5

How does Two-Factor Authentication (2FA) work?

Accepted Answer

Enable 2FA in Settings > Security. Use any authenticator app (Google Authenticator, Authy, 1Password) to scan a QR code or manually enter the secret. After setup, you receive single-use backup codes for emergency access—store these securely offline. Best practice: require 2FA for all administrator accounts and regularly review Active Sessions to revoke unfamiliar devices.

Question 6

What are Access Keys and how do I manage them?

Accepted Answer

Access Keys enable secure API and MCP (Model Context Protocol) integrations. Create keys in Settings > Access Keys with specific scopes and optional expiration dates. Each key is shown only once after creation—store securely like passwords. Track key status (active, expired, revoked), last used time, and immediately revoke compromised keys. Regular rotation is recommended for security.

Question 7

How do document watermarks protect my content?

Accepted Answer

Dynamic watermarks automatically embed viewer-specific information (name, email, date, time) on PDFs. Each user and viewing session produces unique watermarks, making documents traceable if leaked. Configure watermark visibility by role—site owners can exempt themselves while ensuring external stakeholders (Downloaders, Viewers) receive watermarked versions. This deters unauthorized sharing and enables precise leak tracking.

Question 8

What information is logged in audit trails?

Accepted Answer

Comprehensive audit trails record every user action including document access, downloads, permission changes, user invitations, content uploads, deletions, AI chat conversations, workflow executions, search queries, and system configuration changes. Each entry includes timestamp, user identification, IP address, action type, and affected resources. Audit logs are immutable and exportable for compliance requirements.

Question 9

How does Site-Scoped Security work?

Accepted Answer

Each Clear Ideas Site operates as an isolated security boundary with its own users, permissions, and content. Users cannot access content from sites they aren't authorized for, even if they have accounts on the platform. AI workflows and searches respect site boundaries—users only retrieve data from sites they have access to. This enables multi-client or multi-project deployments with complete data segregation.

Question 10

Can I monitor active sessions?

Accepted Answer

Yes, Settings > Active Sessions shows all your current login sessions with device type, location, and last activity. Revoke individual sessions immediately if you notice unfamiliar devices or suspicious activity. This is especially useful after device loss or suspected account compromise.

Question 11

How does Clear Ideas handle AI model security?

Accepted Answer

Clear Ideas has zero-retention agreements with all AI model providers. Your private data is sent to models only for the duration of processing your specific request and is not used for model training. Only the minimum necessary context is shared—your full dataset never leaves the secure Clear Ideas environment. All transmissions are encrypted.

Question 12

What security certifications does Clear Ideas have?

Accepted Answer

Clear Ideas implements rigorous security best practices that meet enterprise-level expectations, including AES-256 encryption, TLS/SSL for all transmissions, role-based access control, comprehensive audit logging, and regular security assessments. For current compliance information and detailed security documentation, contact our security team at security@clearideas.com or consult the Security Approach overview.

Security & Compliance Features

The Security Challenge

Comprehensive Security Architecture

AI-Specific Security

Secure Integrations