Prohibited
- Passwords and passcodes
- Bank usernames or login credentials
- API keys and access tokens
- Full Social Security numbers
- Full bank account numbers
- Security-question answers
- Unnecessary unredacted IDs
Metadata-first safety
Clean Files Without Careless Data Handling
The no-auth stack is for metadata and factual summaries—not raw private documents, credentials, or unnecessary identity data.
Do not paste secrets into a public action.
Safer input
- Document category
- Statement period
- Redacted file name
- Factual event summary
- Missing-page note
- Restricted storage reference
Stop-processing triggers
Credential exposure
Remove the value and have an authorized administrator rotate or revoke it.
Mixed-client records
Separate each client into an authorized restricted workspace.
Public sharing
Restrict access, review sharing history, and obtain human confirmation.
Redaction discipline
01
Preserve the original
Keep the untouched source in restricted storage.
02
Create a working copy
Use a separate file for naming, redaction, summaries, and context.
03
Minimize data
Remove unrelated owner, employee, customer, patient, and identity information.
04
Review permissions
Confirm exactly who can access each sensitive folder and link.