A note shown with every refusal
Default: none. Under Governance → Modes & Permissions, A note shown with every refusal takes a sentence or two in the team's own words — what the team asks and where the sanctioned way is — and A link that goes with the note an https page of the team's own.
With a note set, every refusal a member meets carries it after the reason: a blocked model, a denied MCP server, a tool rule, a link the share scan stopped, a run while the team is paused. On the Mac, a seat told "Refused: …" reads the note too, so it can say what to do instead rather than try another way. Each member hears the note once before their first run on the team, as a notice; a note written later reaches members who joined before it, and a changed note is said again on the Mac.
When to use it. When a refusal would otherwise send someone to a tool outside the team's sight. The note is coaching at the moment of use, in the team's voice.
Data protection, last 12 weeks
Default: shown. Under Team usage, a block counts, week by week, the credentials masked before a prompt left and the reads and connections the protections stopped — a host off the allowlist, a credential file, a sandbox escape, a denied server or tool — from the team's audit record. Twelve weeks, with the last six against the six before.
A number going down with the same amount of work is the protection working earlier; one going up is often a new project with more secrets in reach. The counts are the events; nothing is read again. Show the data-protection trend here hides it, on every app.
What the team holds
Masking keeps credentials and personal data from reaching a model provider. This is the other question: what is stored here. Under Team → What the team holds, an owner or admin presses Scan now, and the server reads the team's discussions, the pages its members published and the reports made from its discussions with the same patterns the masks use — keys and tokens; emails, phone numbers, card and national-id numbers — and lists each place with a count and a link. No value is shown or written anywhere; redacting is done in the discussion. The scan is itself an audit event (team.scanned), on demand only, a few times an hour.
On the Mac, What this Mac holds under Account → Your Data runs the same scan over the discussions kept on that Mac, and nothing leaves it. The iPhone offers the team's scan under Governance.