Security and Compliance

Security and Compliance

This section describes security principles for using the ForgeOne Knowledge Base and the documented platforms.

Principles

• No secrets in articles, screenshots or comments.
• Customer data is only documented when required for resolution and approved for the context.
• Administrative actions are described in a traceable way.
• Public articles only contain information intended for customers.

Access model

The public knowledge base shows curated customer content. Administrative XWiki areas, REST endpoints, login and editing functionality are separated from the public frontend.

Mailhub, CMS and booking systems

Email, websites and appointment booking may involve personal data. Support requests should therefore include only the necessary information and no passwords, tokens or unnecessary private content.

Reporting security issues

Security-relevant observations should be reported with high priority through the agreed support channel. Please do not send secrets in subject lines or unprotected comments.