Security principles
Least exposure
Least exposure
Limit distribution of sensitive search context and share only what collaborators need.
Controlled access
Controlled access
Use organization roles (owner/admin/member) to limit sensitive actions to authorized users. Keep Personal and organization workspaces separate when handling a sensitive case.
Traceable workflows
Traceable workflows
Keep investigations inside projects and history so actions and findings remain auditable.
Data handling in investigations
1
Minimize personal data usage
Search only identifiers required for the investigation scope.
2
Separate fact from inference
Record raw evidence and analyst interpretation as separate notes.
3
Preserve context
Keep source references, timestamps, and result exports for reproducibility.
4
Review before sharing
Remove irrelevant personal details when exporting or sharing results externally.
Compliance checklist
Use this checklist before formal reporting:- Lawful basis and internal authorization confirmed
- Scope and purpose documented
- Critical findings cross-verified
- False-positive risk assessed
- Share/export audience validated
Product boundaries
- What Osintly provides
- What Osintly does not provide
Search launch and streaming UI, result history, Monitoring & Alerts, collaboration features, and export options exposed by the interface.
For current plan features and collaboration limits, refer to osint.ly/pricing. See Monitoring & Alerts for scheduled-monitor behavior.