Security and privacy

Cue checks access to recordings, transcripts and associated session content. Your instance's identity and hosting configuration supplies additional security controls.

Sign-in and sharing

Current Cue deployments use the configured identity provider for sign-in. Account admission, multi-factor authentication and session policies depend on that configuration; older instructions about passwords or invitation lifetimes may not describe your instance.

Read and write permissions control access to a recording. Read access also allows participation in its supervision discussion. Treat the thread as shared session content, not a private note to yourself. Write access permits editing and access management; deletion is a separate permission.

Administrators may have additional authorized access. Do not treat a resource grant as a way to hide information from the people responsible for operating the instance.

Recording playback and downloads

Playback requires authorized access. Cue issues a short-lived, recording-specific playback credential in an HTTP-only cookie after checking access. Production HTTPS and secure-cookie settings must be configured by the operator.

This is access protection, not copy prevention. Authorized readers can use the supported download/export functions, including downloading the recording. Revoking access does not recall files that were already downloaded or recorded elsewhere.

Recording, discussion and deletion

Browser recordings are progressively uploaded. Closing the browser is not a reliable way to discard material already received by the server. Follow the recording recovery and discard workflow.

Use deletion dates to control the recording's application retention. Automatic deletion is not a guarantee that backups, operational logs or previously downloaded copies disappear at the same moment.

If you suspect inappropriate access

Check direct grants and group membership, then contact your organization's administrator using its approved incident channel. Provide the recording identifier, time and observed behavior without unnecessarily attaching recordings, transcripts or session credentials.

For processing locations, optional analysis services and operating responsibilities, see Data processing and hosting.