---
title: NimbusNote Knowledge Base — Security FAQ
---

# Security FAQ

Fictional security and compliance guidance for the NimbusNote Knowledge Base demo.

## Security Controls

- Encryption: Data is encrypted at rest and in transit using industry-standard TLS and AES-256 (demo description).
- Access Controls: Role-based access control (RBAC) is available for workspace admins, editors, and viewers.

## Single Sign-On (SSO)

- Supported providers: SAML 2.0 and OIDC integrations are supported for enterprise workspaces.
- Setup: Admins configure SSO in `Settings → Security → SSO` and test with a staging identity provider before enabling for all users.

## Audit Logs

- Events: Audit logs record key events such as logins, document exports, permission changes, and sharing link creations.
- Retention: Audit logs are retained for 365 days for enterprise plans and are downloadable as CSV for compliance reviews.

## Document Sharing Permissions (security perspective)

- Least privilege: Recommend granting `view` rather than `edit` where possible and using time-limited links for external sharing.
- Revocation: Admins can revoke shared links and remove collaborators at any time; revocations are recorded in audit logs.

This FAQ is fictional and safe for public demo use; use it to test security-related retrieval queries.