Workspace controls

1. Security policy controls the default rules for this workspace, such as allowed email domains, room password requirements, AI availability, media embeds, and export permissions.
2. Audit events help workspace owners review important changes, bridge handoffs, action updates, exports, and policy edits.
3. Compliance export creates a redacted operational snapshot for review. It does not include OAuth secrets, tokens, provider payloads, or private handoff codes.

Example: require room passwords for sensitive retros, disable media embeds for stricter teams, then export audit metadata before a quarterly process review.