Glossary

Workspace: An organisation-bound area for folders, files, members, and controlled shares.

Registered member: A persistent organisation user. Members can choose a passkey on supported devices; password and magic-link sign-in are also available.

External recipient: A person who opens a confirmed-email PIN share or an explicitly created anyone-with-link share. This is not a normal registered-member account or guest-passkey flow.

Provenance: Narrow creator/updater and timestamp fields stored for resources, versions, shares, and verification state. Provenance is not a complete customer audit ledger.

Optional file-payload E2EE: An optional encryption path for supported file upload, preview, and download by enrolled members. Filenames, folder metadata, mirror paths, and current guest shares are outside or lack parity with this boundary.

Sealed room: Not a current product state. A room sealing or close-and-export lifecycle is not implemented.