Workzo security

Security starts with a simple question: who should see this?

Authenticated access, scoped data policies, explicit membership, and revocable sharing keep the answer clear.

An honest account of controls implemented in the current product—not a claim of certification or compliance status.

The control ledger

Six boundaries that work together.

Private workspace and support routes require an authenticated Workzo session.

Database policies scope records through user ownership, profile identity, or explicit membership checks.

Dataroom content is limited to members, with admin checks for management actions.

Document and folder policies verify the current user's relationship to the requested resource.

Integration connection records are scoped to the profile that created them.

Customers see their own conversations while internal support notes remain staff-only.

When work leaves the workspace

Grant another Workzo account preview or download access through its Share ID.

Create a read-only public link when access without a Workzo account is intentional.

Regenerating or disabling a public link prevents the previous token from being used again.