> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.meetgail.com/platform/settings/security-settings/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.meetgail.com/_mcp/server.

# Security Settings

> Configure security settings to protect your Gail workspace and data.

Protect your Gail workspace with comprehensive security controls.

## Session Management

### Session Timeout

Configure automatic logout:

In Settings go to:

* **Security**

![Security Settings](/_fern-img/02727d72316d7ac3f24471c32a081fd90989999e0bf72d8356353248300eefe1.webp)

* Locate the **Idle Session Timeout** and **Absolute Session Timeout** boxes

![Session Timeout Boxes](/_fern-img/aa8850d0676718aacb6a1c687cae181abe4e3a927d25925d927f9f6dc14b2011.webp)

* Adjust accordingly and save the changes

```yaml
session:
  idle_timeout: 30m    # Logout after 30 min inactive
  max_duration: 12h    # Force logout after 12 hours
```

## Data Security

### Encryption

All data is encrypted:

* **In Transit** - TLS 1.3
* **At Rest** - AES-256

## Audit Logging

### What's Logged

All significant actions are logged:

* Authentication events (login, logout, failed attempts)
* Configuration changes
* Data access (call recordings, exports)
* Team management (invites, role changes)
* API usage

## Compliance

### SOC 2 Type II

Gail maintains SOC 2 Type II certification. Request our report at [support@meetgail.com](mailto:support@meetgail.com).

### HIPAA

> **Note**
>
> HIPAA compliance available on Enterprise plans with BAA.

For healthcare customers:

1. Contact sales for HIPAA-compliant plan
2. Sign Business Associate Agreement (BAA)
3. Enable HIPAA controls

## Security Best Practices

### For Administrators

* Enable MFA for all team members
* Use SSO when available

### For Team Members

* Use strong, unique passwords
* Enable MFA on your account
* Don't share credentials
* Log out of shared computers
* Report suspicious activity

## Incident Response

### Reporting Security Issues

If you discover a security vulnerability:

* Email: [support@meetgail.com](mailto:support@meetgail.com)
* Do not disclose publicly until resolved
* We'll acknowledge within 24 hours

### In Case of Breach

If you suspect unauthorized access:

1. Change your password immediately
2. Revoke all API keys
3. Contact [support@meetgail.com](mailto:support@meetgail.com)

## Next Steps

* [Team Management](/platform/settings/team-management) - Manage team access
* [Billing & Usage](/platform/settings/billing-usage) - Review account settings

> Documentation for Gail, the AI platform for financial services. Learn how to set up GailGPT and Gail Agent to automate customer communications for insurance, banking, and finance.