Everything your IT team will ask.
The short answers first, and where to read the long ones.
- Your workspace, sealed offEvery record carries its workspace, and membership is checked before a single row is read.
- Two-step sign-inRequired for Owners and Admins who sign in with a password.
- Encrypted, with daily backupsData encrypted at rest. Backups daily, kept for 7 days.
- No AI trainingNo AI model is ever trained on your data.
- Staff access on a logEvery opening records who, when and why, and your Owner can read it.
- Breach notice in 24 hoursOwners are told of a personal-data breach within 24 hours of confirming it.
The questions
How do people sign in?
With Google or a password. With Google, Google's own two-step verification applies. Owners and Admins who sign in with a password must add a code from an authenticator app, and everyone else may. Each person sees where they are signed in and can end any session.
Where is our data kept?
In Tamaam's own database, encrypted at rest. Every record carries its workspace, and membership is checked before a single row is read. Backups run daily and are kept for 7 days.
Which AI provider sees our data, and is it used for training?
Nefer reads only the records the person asking may read, and sends nothing more to the model that answers. No AI model is ever trained on your data.
How are connected accounts protected?
Mail, calendar and other connection tokens are encrypted before they are written, with a key held in a hardware security module, so a copy of the database alone cannot open them.
How are files shared?
Private files are read only through signed links made on each click, after the person's access is checked: one hour for private files, 15 minutes for a sealed signed document. An email links to the document's page, never to the file.
Can Tamaam staff see our workspace?
Only through one logged door: each opening records who, when and why, and your Owner sees it in Settings, Security, Access log.
What happens if something goes wrong?
The Owners of every affected workspace are told about a confirmed personal-data breach within 24 hours of confirming it, with what is known, and updated as it develops.
How long are signed documents kept?
Ten years from completion, with their event log and sealed file, unless your workspace keeps them longer.
Read more
Your review needs something else? Write to us. Found a security problem? Report it to us.