Sensitivity & classification
Every fact carries a sensitivity. Classification needs no company-specific training: a source floor plus a narrow rubric plus human approval does the work.
The three levels
Public — every member of the workspace can read it.
Confidential — owners and admins only. Compensation, fundraising, legal.
Personal — visible only to the person it belongs to: whoever's inbox an email came from, or whoever made a capture. Owners and admins cannot read it.
How a fact gets its level
The source sets a floor (an email or a private capture can never come out public), an LLM rubric classifies the content within that floor, and anything that would widen access waits for a human. set_sensitivity lets an agent or a person move a fact deliberately, and the change is audited.
The rubric reads a document one passage at a time and each passage keeps its own verdict, so a fact carries the level of the passage it was extracted from. A page that holds an org chart and, six pages later, a pay band is a confidential page — its raw text is admins-only — but the org chart's facts stay readable by every member. A fact stated in both a public passage and a confidential one is public: a claim made in the open is not a secret because it is also made behind a wall.
Evidence only you can see never changes what others see. A line from your email can't overwrite or retire a line the team reads unless you share it.
The workspace settings that move these lines
Four switches in Settings govern everyone, so only an owner or admin can change them, and every change is written to the audit log.