data/sample_docs/security_faq.md

metadata

title: NimbusNote Knowledge Base — Security FAQ

Security FAQ

Fictional security and compliance guidance for the NimbusNote Knowledge Base demo.

Security Controls

• Encryption: Data is encrypted at rest and in transit using industry-standard TLS and AES-256 (demo description).
• Access Controls: Role-based access control (RBAC) is available for workspace admins, editors, and viewers.

Single Sign-On (SSO)

• Supported providers: SAML 2.0 and OIDC integrations are supported for enterprise workspaces.
• Setup: Admins configure SSO in Settings → Security → SSO and test with a staging identity provider before enabling for all users.

Audit Logs

• Events: Audit logs record key events such as logins, document exports, permission changes, and sharing link creations.
• Retention: Audit logs are retained for 365 days for enterprise plans and are downloadable as CSV for compliance reviews.

Document Sharing Permissions (security perspective)

• Least privilege: Recommend granting view rather than edit where possible and using time-limited links for external sharing.
• Revocation: Admins can revoke shared links and remove collaborators at any time; revocations are recorded in audit logs.

This FAQ is fictional and safe for public demo use; use it to test security-related retrieval queries.