Allowed domains restrict access by email domain when domain matching is enabled.Use this when only people from approved organisation domains should join or use the workspace.
Allowed IPs restrict API or workspace access to approved addresses or CIDR ranges where supported.Only use IP restrictions when the organisation has stable network ranges. Mobile workforces and home networks often make strict IP rules hard to operate.
Web search controls whether BehavIQ can use web results as extra context where the assistant supports it.Turn this off when answers must only use internal workspace guidance and model knowledge.
Security policies also show the conversation retention setting and the fixed audit log window. Conversation retention is indefinite by default unless an enterprise admin chooses a finite window. See data retention for details.
