Protect access
- Store credentials in an approved secret manager rather than ordinary notes, email, or tickets.
- Grant the minimum access needed for the task and remove temporary access when the work ends.
- Use individual accounts when available so actions have a clear owner.
- Do not copy passwords, tokens, recovery codes, or shared secrets into a public knowledge base.
Handle diagnostic data deliberately
Before collecting screenshots, logs, exports, or recordings, confirm that the material is needed and that the collection method is authorized.
Remove patient, employee, customer, and site identifiers before sending information outside its approved support channel. Use a sample record when it can demonstrate the issue without exposing live data.
Remove temporary data
Keep exports only for the time and purpose authorized. Store them in the approved location, transfer them through a secure channel, and remove extra copies when the task is complete.
Public troubleshooting content should use generic examples. Do not include real account identifiers, internal URLs, server names, client details, or credentials.