How can we help?

If you encounter information that appears to belong to another organization or an unauthorized workspace, stop interacting with it and report the situation promptly. Polyosync is designed around separating business environments and respecting each organization's control over its information. Unexpected access to another organization's protected data should be treated as a potential security incident. What should I do immediately? 1. Stop accessing the unexpected information. 2. Do not search for additional records. 3. Do not copy, export, or distribute the information. 4. Avoid sharing screenshots containing unnecessary confidential details. 5. Record the approximate time and the feature involved. 6. Notify an authorized administrator where appropriate. 7. Contact Polyosync Support promptly. What information should I report? Provide: 1. The workspace you were using. 2. The page or feature involved. 3. The action that led to the unexpected result. 4. The approximate date and time. 5. A description of the information displayed. 6. Whether the issue occurred more than once. Do not include the contents of another organization's private records unless specifically required through an appropriate secure investigation process. Could the information be publicly available? Yes. Some information may be intentionally public. However, if you reasonably believe the information is confidential or belongs to an unrelated customer, report the issue rather than making assumptions. What if an AI Employee generated the information? AI-generated content can be inaccurate or fabricated. An unexpected response does not automatically prove that private records were accessed. Nevertheless, credible indications of unauthorized data exposure should be investigated. What if an integration returns the wrong records? Stop the affected operation and review the associated external account. Report the issue with the relevant integration details. Should I investigate the vulnerability myself? Do not attempt to access additional unauthorized information. Security investigation and testing should take place only within properly authorized boundaries. Our data principle Business data belongs to the business that provides it. Polyosync does not sell customer business data or use it to train its own AI models. Respecting organizational boundaries is fundamental to this approach. Summary Stop interacting with unexpected information, preserve minimal evidence, and report the issue promptly.