[{"data":1,"prerenderedAt":450},["ShallowReactive",2],{"navigation":3,"\u002Fsecurity\u002Foverview":246,"\u002Fsecurity\u002Foverview-surround":445},[4,30,61,96,136,171,196,226],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":29},"Getting started","i-lucide-rocket","\u002Fgetting-started","1.getting-started",[10,15,20,25],{"title":11,"path":12,"stem":13,"icon":14},"Introduction","\u002Fgetting-started\u002Fintroduction","1.getting-started\u002F1.introduction","i-lucide-house",{"title":16,"path":17,"stem":18,"icon":19},"Add Clarify","\u002Fgetting-started\u002Fadd-clarify","1.getting-started\u002F2.add-clarify","i-lucide-bot",{"title":21,"path":22,"stem":23,"icon":24},"Dashboard tour","\u002Fgetting-started\u002Fdashboard-tour","1.getting-started\u002F3.dashboard-tour","i-lucide-compass",{"title":26,"path":27,"stem":28,"icon":6},"Quickstart","\u002Fgetting-started\u002Fquickstart","1.getting-started\u002F4.quickstart",false,{"title":31,"icon":32,"path":33,"stem":34,"children":35,"page":29},"Core concepts","i-lucide-lightbulb","\u002Fconcepts","2.concepts",[36,41,46,51,56],{"title":37,"path":38,"stem":39,"icon":40},"How Clarify works","\u002Fconcepts\u002Fhow-clarify-works","2.concepts\u002F1.how-clarify-works","i-lucide-git-compare-arrows",{"title":42,"path":43,"stem":44,"icon":45},"Tickets & delivery modes","\u002Fconcepts\u002Ftickets-and-modes","2.concepts\u002F2.tickets-and-modes","i-lucide-ticket",{"title":47,"path":48,"stem":49,"icon":50},"Categories & ticket fields","\u002Fconcepts\u002Fcategories-and-inputs","2.concepts\u002F3.categories-and-inputs","i-lucide-tags",{"title":52,"path":53,"stem":54,"icon":55},"Cards & placeholders","\u002Fconcepts\u002Fcards-and-placeholders","2.concepts\u002F4.cards-and-placeholders","i-lucide-layout-panel-left",{"title":57,"path":58,"stem":59,"icon":60},"Roles & permissions","\u002Fconcepts\u002Froles-and-permissions","2.concepts\u002F5.roles-and-permissions","i-lucide-user-cog",{"title":62,"icon":63,"path":64,"stem":65,"children":66,"page":29},"Configuration","i-lucide-sliders-horizontal","\u002Fconfiguration","3.configuration",[67,72,77,81,86,91],{"title":68,"path":69,"stem":70,"icon":71},"Onboarding","\u002Fconfiguration\u002Fonboarding","3.configuration\u002F1.onboarding","i-lucide-wand-sparkles",{"title":73,"path":74,"stem":75,"icon":76},"General settings","\u002Fconfiguration\u002Fgeneral-settings","3.configuration\u002F2.general-settings","i-lucide-settings",{"title":78,"path":79,"stem":80,"icon":50},"Categories","\u002Fconfiguration\u002Fcategories","3.configuration\u002F3.categories",{"title":82,"path":83,"stem":84,"icon":85},"Ticket inputs","\u002Fconfiguration\u002Fticket-inputs","3.configuration\u002F4.ticket-inputs","i-lucide-form-input",{"title":87,"path":88,"stem":89,"icon":90},"Panels","\u002Fconfiguration\u002Fpanels","3.configuration\u002F5.panels","i-lucide-panel-top",{"title":92,"path":93,"stem":94,"icon":95},"White label (your own bot)","\u002Fconfiguration\u002Fwhite-label","3.configuration\u002F6.white-label","i-lucide-badge-check",{"title":97,"icon":98,"path":99,"stem":100,"children":101,"page":29},"Modules","i-lucide-blocks","\u002Fmodules","4.modules",[102,106,111,116,121,126,131],{"title":103,"path":104,"stem":105,"icon":98},"Modules overview","\u002Fmodules\u002Foverview","4.modules\u002F1.overview",{"title":107,"path":108,"stem":109,"icon":110},"Transcripts","\u002Fmodules\u002Ftranscripts","4.modules\u002F2.transcripts","i-lucide-file-text",{"title":112,"path":113,"stem":114,"icon":115},"Feedback","\u002Fmodules\u002Ffeedback","4.modules\u002F3.feedback","i-lucide-star",{"title":117,"path":118,"stem":119,"icon":120},"Escalation","\u002Fmodules\u002Fescalation","4.modules\u002F4.escalation","i-lucide-siren",{"title":122,"path":123,"stem":124,"icon":125},"Opening hours","\u002Fmodules\u002Fopening-hours","4.modules\u002F5.opening-hours","i-lucide-clock",{"title":127,"path":128,"stem":129,"icon":130},"Webhooks","\u002Fmodules\u002Fwebhooks","4.modules\u002F6.webhooks","i-lucide-webhook",{"title":132,"path":133,"stem":134,"icon":135},"Assignment","\u002Fmodules\u002Fassignment","4.modules\u002F7.assignment","i-lucide-user-check",{"title":137,"icon":138,"path":139,"stem":140,"children":141,"page":29},"Integrations","i-lucide-plug","\u002Fintegrations","5.integrations",[142,146,151,156,161,166],{"title":143,"path":144,"stem":145,"icon":138},"Integrations overview","\u002Fintegrations\u002Foverview","5.integrations\u002F1.overview",{"title":147,"path":148,"stem":149,"icon":150},"Stripe","\u002Fintegrations\u002Fstripe","5.integrations\u002F2.stripe","i-simple-icons-stripe",{"title":152,"path":153,"stem":154,"icon":155},"PayPal","\u002Fintegrations\u002Fpaypal","5.integrations\u002F3.paypal","i-simple-icons-paypal",{"title":157,"path":158,"stem":159,"icon":160},"Tebex","\u002Fintegrations\u002Ftebex","5.integrations\u002F4.tebex","i-lucide-shopping-cart",{"title":162,"path":163,"stem":164,"icon":165},"Patreon","\u002Fintegrations\u002Fpatreon","5.integrations\u002F5.patreon","i-simple-icons-patreon",{"title":167,"path":168,"stem":169,"icon":170},"GitHub","\u002Fintegrations\u002Fgithub","5.integrations\u002F6.github","i-simple-icons-github",{"title":172,"icon":173,"path":174,"stem":175,"children":176,"page":29},"Data connectors","i-lucide-share-2","\u002Fdata-connectors","6.data-connectors",[177,181,186,191],{"title":178,"path":179,"stem":180,"icon":173},"Data connectors overview","\u002Fdata-connectors\u002Foverview","6.data-connectors\u002F1.overview",{"title":182,"path":183,"stem":184,"icon":185},"Build a connector","\u002Fdata-connectors\u002Fbuild-a-connector","6.data-connectors\u002F2.build-a-connector","i-lucide-wrench",{"title":187,"path":188,"stem":189,"icon":190},"Discord auto-detect","\u002Fdata-connectors\u002Fdiscord-auto-detect","6.data-connectors\u002F3.discord-auto-detect","i-lucide-scan-face",{"title":192,"path":193,"stem":194,"icon":195},"Connector security","\u002Fdata-connectors\u002Fsecurity","6.data-connectors\u002F4.security","i-lucide-shield",{"title":197,"icon":198,"path":199,"stem":200,"children":201,"page":29},"Security & trust","i-lucide-shield-check","\u002Fsecurity","7.security",[202,206,211,216,221],{"title":203,"path":204,"stem":205,"icon":198},"Security overview","\u002Fsecurity\u002Foverview","7.security\u002F1.overview",{"title":207,"path":208,"stem":209,"icon":210},"Encryption & secrets","\u002Fsecurity\u002Fencryption","7.security\u002F2.encryption","i-lucide-lock",{"title":212,"path":213,"stem":214,"icon":215},"The relay & your privacy","\u002Fsecurity\u002Fthe-middleman","7.security\u002F3.the-middleman","i-lucide-eye-off",{"title":217,"path":218,"stem":219,"icon":220},"Access & permissions","\u002Fsecurity\u002Faccess-control","7.security\u002F4.access-control","i-lucide-key-round",{"title":222,"path":223,"stem":224,"icon":225},"Data & retention","\u002Fsecurity\u002Fdata-and-retention","7.security\u002F5.data-and-retention","i-lucide-database",{"title":227,"icon":228,"path":229,"stem":230,"children":231,"page":29},"Reference","i-lucide-book-open","\u002Freference","8.reference",[232,237,241],{"title":233,"path":234,"stem":235,"icon":236},"FAQ","\u002Freference\u002Ffaq","8.reference\u002F1.faq","i-lucide-circle-help",{"title":238,"path":239,"stem":240,"icon":185},"Troubleshooting","\u002Freference\u002Ftroubleshooting","8.reference\u002F2.troubleshooting",{"title":242,"path":243,"stem":244,"icon":245},"Glossary","\u002Freference\u002Fglossary","8.reference\u002F3.glossary","i-lucide-book-a",{"id":247,"title":203,"body":248,"description":438,"extension":439,"links":440,"meta":441,"navigation":442,"path":204,"seo":443,"stem":205,"__hash__":444},"docs\u002F7.security\u002F1.overview.md",{"type":249,"value":250,"toc":430},"minimark",[251,255,258,263,355,361,365,393,397,421],[252,253,254],"p",{},"Clarify sits between your members and your team, and it handles sensitive things on your behalf: payment connections, API keys, message history and who is allowed to do what. This page is the short version of how we keep all of that safe. The pages that follow go deeper.",[252,256,257],{},"The short answer: your secrets are encrypted and never shown back to you, your staff stay private, and access is checked on every single request.",[259,260,262],"h2",{"id":261},"the-eight-guarantees","The eight guarantees",[264,265,266,288,299,312,318,330,337,349],"field-group",{},[267,268,271],"field",{"name":269,"type":270},"No plaintext secrets","Encryption",[252,272,273,274,278,279,283,284,287],{},"Every key, token and password you connect is encrypted at rest with ",[275,276,277],"strong",{},"AES-256-GCM",". When the dashboard loads a saved integration it only ever sees a \"set\" marker, never the value — which is why editing a secret shows ",[280,281,282],"em",{},"\"leave blank to keep\"",". Read more in ",[285,286,270],"a",{"href":208},".",[267,289,292],{"name":290,"type":291},"Tokens minted server-side","OAuth",[252,293,294,295,298],{},"When you connect a provider like Patreon or GitHub, the access tokens are exchanged and encrypted ",[275,296,297],{},"on our servers",". They never pass through your browser, so there is nothing sensitive to intercept.",[267,300,303],{"name":301,"type":302},"Staff stay anonymous & private","The relay",[252,304,305,306,283,309,287],{},"In the team's forum thread, member messages are relayed by an anonymous webhook — your bot's internal plumbing is never exposed. And because Clarify is always the middleman, ",[275,307,308],{},"your staff never DM members from their personal accounts",[285,310,311],{"href":213},"The middleman",[267,313,315],{"name":314,"type":270},"Fail-closed encryption",[252,316,317],{},"Before anything is saved, a guard checks that no secret is still in plain text. If encryption were ever bypassed it becomes a hard error — never silent storage. There is no \"accidentally saved in the clear\" path.",[267,319,321],{"name":320,"type":172},"SSRF-safe connectors",[252,322,323,324,327,328,287],{},"A ",[285,325,326],{"href":179},"data connector"," can only reach real, public endpoints. Every request is checked against a denylist of internal and cloud addresses, redirects aren't followed, and responses are size-capped — so a connector can't be tricked into reaching somewhere it shouldn't. Read more in ",[285,329,192],{"href":193},[267,331,334],{"name":332,"type":333},"Constant-time comparisons","Access control",[252,335,336],{},"Security tokens — service tokens, CSRF tokens, OAuth state — are compared in constant time, so their contents can't be guessed by measuring how long a check takes.",[267,338,340],{"name":339,"type":333},"Admin re-checked every request",[252,341,342,343,346,347,287],{},"Who counts as an admin is verified ",[275,344,345],{},"fresh on every request",", not cached at login. Remove someone's access and it takes effect immediately. Read more in ",[285,348,333],{"href":218},[267,350,352],{"name":351,"type":291},"Signed, short-lived OAuth state",[252,353,354],{},"Every \"Connect\" flow carries a signed token that expires in about 10 minutes and is tied to your server. This blocks tampering and replay, so a connection can only ever be completed by the person who started it.",[356,357,358],"note",{},[252,359,360],{},"The mechanics behind these — master keys, environment configuration, infrastructure — are operated by Clarify. There is nothing for you to configure to get them, and nothing you can misconfigure to lose them.",[259,362,364],{"id":363},"what-this-means-for-you","What this means for you",[366,367,368,375,381,387],"ul",{},[369,370,371,374],"li",{},[275,372,373],{},"Connecting an integration is safe."," Paste your key once; it's encrypted immediately and never shown back.",[369,376,377,380],{},[275,378,379],{},"Your team's privacy is protected."," No one has to hand out their personal DMs to do support.",[369,382,383,386],{},[275,384,385],{},"Access is always current."," Roles and permissions reflect reality right now, not who was an admin an hour ago.",[369,388,389,392],{},[275,390,391],{},"Your own systems stay walled off."," Connectors reach your public API and nowhere near your internal network.",[259,394,396],{"id":395},"dig-deeper","Dig deeper",[398,399,400,406,411,416],"card-group",{},[401,402,403],"card",{"icon":210,"title":270,"to":208},[252,404,405],{},"How your keys and tokens are encrypted, redacted on read, and preserved when you edit.",[401,407,408],{"icon":40,"title":311,"to":213},[252,409,410],{},"How the relay works, why staff stay anonymous, and what each side of a ticket can see.",[401,412,413],{"icon":220,"title":333,"to":218},[252,414,415],{},"Login, admin levels, per-server scoping and instant revocation.",[401,417,418],{"icon":225,"title":222,"to":223},[252,419,420],{},"What Clarify stores, what leaves Discord, and how long transcripts are kept.",[422,423,424],"tip",{"to":234},[252,425,426,427,429],{},"Have a specific \"does Clarify…?\" question? The ",[285,428,233],{"href":234}," covers the common ones.",{"title":431,"searchDepth":432,"depth":433,"links":434},"",1,2,[435,436,437],{"id":261,"depth":433,"text":262},{"id":363,"depth":433,"text":364},{"id":395,"depth":433,"text":396},"How Clarify protects your secrets, keeps staff private, and controls who can see what.","md",null,{},{"icon":198},{"title":203,"description":438},"o4AryVOAXnNtP5o6n3WzuypuWcaVJKF97H4skv4Vo3E",[446,448],{"title":192,"path":193,"stem":194,"description":447,"icon":195,"children":-1},"How Clarify keeps user-built connectors safe — only real public endpoints, encrypted credentials, no redirects, and capped responses.",{"title":207,"path":208,"stem":209,"description":449,"icon":210,"children":-1},"How Clarify encrypts your payment keys, tokens and connector credentials at rest, and why the dashboard never shows them again.",1792666271152]