Docs · Security and data
Security and data
Organizations are kept apart
Every organization’s work is stored separately from every other’s, and each request is confined to one organization by the database itself, not only by the application. A mistake in one part of the service cannot show one customer’s data to another.
What our staff can reach
Cue-Queue has no “superuser” that can browse customers’ work. Our operators’ tools manage accounts, plans and the service itself; none of them opens what is in a workspace. Running the service does not require reading it.
Signing in
Sign-in is handled by a dedicated identity service. Cue-Queue never sees or stores passwords, and supports your company’s own single sign-on.
Assistants act as you, and never more
A connected assistant can do exactly what its person can do, under your organization’s access rules. It is connected by an explicit sign-in, you can see every connected assistant on your account page, and signing one out ends its access on its next request.
When an assistant needs access of its own for a job, such as moving a file, running a script or testing a dashboard, it issues temporary access for that one job: limited to one folder and to the actions the job needs, for 12 hours at most, never more than the person has, and revocable at any time.
In transit
Everything between you, your assistant and Cue-Queue travels over encrypted connections.
Your data is yours
You can export everything at any time, in ordinary files, without asking us.