> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tiro.ooo/llms.txt
> Use this file to discover all available pages before exploring further.

# Sharing security and management

> Admins revoke every share link in the workspace from one place, and enforce caps on share scope, expiry, and allowed domains as policy.

export const PlanGateCard = ({plan, page, lang = "ko", children}) => {
  const BADGE = {
    pro: {
      ko: "Pro+",
      en: "Pro+",
      ja: "Pro+"
    },
    team: {
      ko: "팀 플랜",
      en: "Team Plan",
      ja: "チームプラン"
    },
    enterprise: {
      ko: "엔터프라이즈",
      en: "Enterprise",
      ja: "エンタープライズ"
    }
  };
  const COPY = {
    pro: {
      ko: {
        lead: "이 기능은 Pro 플랜 이상에 포함되어 있어요.",
        tail: "지금 쓰는 워크스페이스에서 바로 업그레이드할 수 있어요.",
        cta: "플랜 업그레이드하기"
      },
      en: {
        lead: "This feature is included in Pro plans and above.",
        tail: "You can upgrade right from your workspace.",
        cta: "Upgrade your plan"
      },
      ja: {
        lead: "この機能はProプラン以上でご利用いただけます。",
        tail: "ワークスペースからすぐにアップグレードできます。",
        cta: "プランをアップグレード"
      }
    },
    team: {
      ko: {
        lead: "이 기능은 함께 쓰는 워크스페이스에서 진가가 나와요.",
        tail: "팀원을 초대하면 바로 시작할 수 있어요.",
        cta: "팀원 초대하기"
      },
      en: {
        lead: "This feature shines in a shared workspace.",
        tail: "Invite your teammates to get started.",
        cta: "Invite teammates"
      },
      ja: {
        lead: "この機能はチームで使うワークスペースで真価を発揮します。",
        tail: "メンバーを招待してすぐに始められます。",
        cta: "メンバーを招待"
      }
    },
    enterprise: {
      ko: {
        lead: "이 기능은 엔터프라이즈 플랜에서 제공돼요.",
        tail: "조직에 필요한 보안 구성을 영업팀이 함께 설계해 드려요.",
        cta: "도입 문의하기"
      },
      en: {
        lead: "This feature is available on the Enterprise plan.",
        tail: "Our sales team will help design the security setup your organization needs.",
        cta: "Contact sales"
      },
      ja: {
        lead: "この機能はエンタープライズプランでご利用いただけます。",
        tail: "組織に必要なセキュリティ構成を営業チームがご支援します。",
        cta: "導入のお問い合わせ"
      }
    }
  };
  const HREF = {
    pro: "https://tiro.ooo/" + lang + "/n?utm_source=docs&utm_medium=plan_callout&utm_campaign=plan_upsell_pro&utm_content=" + page + "#settings/plans",
    team: "https://tiro.ooo/" + lang + "/n?utm_source=docs&utm_medium=plan_callout&utm_campaign=plan_upsell_team&utm_content=" + page + "#settings/plans",
    enterprise: "https://relate.so/forms/yr14ayb1s9zdkuru?utm_source=docs&utm_medium=plan_callout&utm_campaign=plan_upsell_enterprise&utm_content=" + page
  };
  const copy = COPY[plan][lang];
  return <div className="plan-gate-card">
      <div className="plan-gate-card-text">
        <span className="plan-gate-card-title">
          {({
    pro: "Pro Plan",
    team: "Team Plan",
    enterprise: "Enterprise Plan"
  })[plan]}
        </span>
        <p>
          {copy.lead} {children} {copy.tail}
        </p>
      </div>
      <a className="plan-gate-card-button" href={HREF[plan]}>
        {copy.cta}
        <svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="M5 12h14" /><path d="m12 5 7 7-7 7" /></svg>
      </a>
    </div>;
};

export const PlanBadge = ({plan, lang = "ko"}) => <span className="plan-badge">
    {({
  pro: {
    ko: "Pro+",
    en: "Pro+",
    ja: "Pro+"
  },
  team: {
    ko: "팀 플랜",
    en: "Team Plan",
    ja: "チームプラン"
  },
  enterprise: {
    ko: "엔터프라이즈",
    en: "Enterprise",
    ja: "エンタープライズ"
  }
})[plan][lang]}
  </span>;

Share link management and revocation work in every workspace, and workspace-wide share policy comes with the Enterprise plan. To choose the share scope for an individual note, see the [Sharing](/en/guide/sharing/overview) guide. This page collects the controls an admin uses to govern sharing. These work on the web and desktop apps today, with mobile support rolling out over time.

## What can you do?

Keep the convenience of sharing notes by link, while an admin keeps the contents from leaking outside the company.

* **Manage and revoke share links**: An admin reviews every link shared in the workspace from one place and revokes any of them right away.
* **Enforce a share scope cap** <PlanBadge plan="enterprise" />: An admin sets the widest share scope people can pick for the links they create, blocking anything broader than the cap. To see how people choose a share scope per note, see the [Sharing](/en/guide/sharing/overview) guide.
* **Workspace share policy** <PlanBadge plan="enterprise" />: An admin sets the share scope cap, the maximum expiry, and the allowed company domains.

## Open a link someone shared with you

A note link shared with the **\[People at my company]** scope, received over a Slack DM or email, opens right away once you sign in with your company account. You do not need to sign up for Tiro separately.

1. Click the link and the "Sign in with your company account" screen appears. If you are already signed in with your company account, the note opens right away.
2. Click **\[Sign in with company account]** and sign in with your company Google account.
3. After you sign in, you return to the note automatically and can read it.

<Frame caption="The screen that appears when you open a [People at my company] link without signing in.">
  <img src="https://mintcdn.com/theplato/ktoeN7oq59Lj2gzb/images/guide/sharing/link-security/en/login-gate.png?fit=max&auto=format&n=ktoeN7oq59Lj2gzb&q=85&s=405af65d04dbc391e69b369b5a1d4840" alt="The Sign in with your company account screen, with a lock icon and a Sign in with company account button." width="1024" height="656" data-path="images/guide/sharing/link-security/en/login-gate.png" />
</Frame>

You can only open the note by signing in with an allowed company domain account. By default that is the company domain of whoever shared the note, and on the Enterprise plan an admin manages the allowed domain list directly. You can open the link as long as you authenticate with that domain account, even without a Tiro account, and the note stays hidden if you sign in with a different domain account. It works the same whether you click the link from a Slack DM, an email, or any other path.

## Review and revoke shared links

A workspace admin reviews every active link in one place and revokes any of them right away. Under **\[Settings]** → **\[Workspace]**, the "Shared links" section lists the currently shared links, along with each note's title, share scope, and share date.

<Frame caption="The &#x22;Shared links&#x22; section in workspace settings.">
  <img src="https://mintcdn.com/theplato/ktoeN7oq59Lj2gzb/images/guide/sharing/link-security/en/shared-links.png?fit=max&auto=format&n=ktoeN7oq59Lj2gzb&q=85&s=ff38ea41a6cfa1e366727e0f07555e08" alt="The Shared links list, showing note titles, share scope, and share date, with a Revoke button on each row and a Revoke all button at the top." width="1424" height="660" data-path="images/guide/sharing/link-security/en/shared-links.png" />
</Frame>

* To pull back one link, click the **\[Revoke]** button on its row.
* To pull back several links at once, select them with the checkboxes and revoke them.
* To pull back every link at once, click the **\[Revoke all]** button at the top.

A revoked link stops opening immediately, and the note returns to private. To share the note again, create a new share link from the note.

<Warning>
  Revoking cannot be undone. The same link cannot be restored, and sharing again
  creates a new link.
</Warning>

## Manage workspace share policy <PlanBadge plan="enterprise" />

This setting shows only to workspace admins. As an admin, you set the share scope, expiry, and allowed company domains for the links your team creates, at the workspace level. Under **\[Settings]** → **\[Workspace]**, set the three policies in the "Share policy" section.

<Frame caption="The &#x22;Share policy&#x22; section in workspace settings.">
  <img src="https://mintcdn.com/theplato/ktoeN7oq59Lj2gzb/images/guide/sharing/link-security/en/share-policy.png?fit=max&auto=format&n=ktoeN7oq59Lj2gzb&q=85&s=27543c6e0979376551a0c35af8ff5a9f" alt="The Share policy section, with the workspace share scope cap set to People at my company and the maximum link expiry set to 90 days." width="1440" height="394" data-path="images/guide/sharing/link-security/en/share-policy.png" />
</Frame>

The **\[Workspace share scope cap]** option enforces the widest share scope people can pick for the links they create. You set the cap to one of three levels: **\[Anyone with link]**, **\[People at my company]**, or **\[Private (no link sharing)]**. The strictest level, **\[Private (no link sharing)]**, blocks link sharing across the whole workspace. The cap applies retroactively to existing shared notes right away. For example, if you set the cap to **\[People at my company]**, a link already shared as **\[Anyone with link]** also becomes viewable only by people at your company from that point on, with no need to recreate the link. When someone shares a new note and picks a scope wider than the cap, it adjusts down to the cap automatically.

The **\[Maximum link expiry]** option sets the longest number of days before a new share link expires. Leave the value empty to keep links indefinitely with no expiry. The maximum expiry applies to share links created after you set it, and existing links created before never expire from it.

In the allowed company domains setting, you manage the list of company domains that can open **\[People at my company]** links. Anyone who authenticates with a registered domain account can open the link, even without a Tiro account.

## Frequently asked questions

### What happens to links I shared before setting a policy?

They are protected by the share scope cap automatically, with nothing for you to touch. When the cap is set to **\[People at my company]**, a note you shared earlier as **\[Anyone with link]** becomes viewable only by people at your company from that point on. The policy applies at the moment someone opens the note, so there is no need to recreate the link, and the address stays the same.

The maximum link expiry behaves differently. Expiry applies to share links created after you set the policy, and links created before never expire from it.

### How do I show a note to someone outside the company (an external partner)?

Invite them to the note directly. A share link only opens for allowed company domain accounts under the workspace policy, but if you type that person's Tiro account email into the invite field in the "Share note" popup, you invite them by name and they can view the note.

There is no way to use anonymous link sharing to get around the workspace visibility cap. Only named invites, where it is clear who is viewing, are allowed.

### Can someone open the link without a Tiro account?

Yes, they can, even if they have never signed up for Tiro. Opening a link shared as **\[People at my company]** brings up the "Sign in with your company account" screen, and clicking **\[Sign in with company account]** to sign in with a company Google account takes them straight to the note.

The email domain of the account they sign in with has to match an allowed company domain for the note to open.

### I opened a "People at my company" link but it says the note can't be found

It is usually one of these three causes. Check them in order.

1. **Check the signed-in account**: If you are signed in with a personal account instead of a company account, the note shows as missing for security. Sign in again with your company domain email account.
2. **Check link expiry**: If the workspace has a maximum link expiry set, an expired link is blocked with the same screen.
3. **Check for revocation**: An admin may have revoked the link.

You cannot view a note through an expired or revoked link, so ask the note owner for a new share link.

### Can I block a link I shared by mistake right away?

Yes. When a workspace admin clicks the **\[Revoke]** button for the note in the "Shared links" list in workspace settings, the link is invalidated immediately. In a hurry, ask your admin to revoke it along with the note title.

### Why don't I see the sharing settings in the mobile app?

The sharing security and management options work on the web and desktop apps today. Mobile support is rolling out over time. Until then, open Tiro in a web browser or the desktop app to manage the sharing settings.

<PlanGateCard plan="enterprise" page="guide-sharing-link-security" />

***

**Related pages**: [Sharing](/en/guide/sharing/overview) · [Integrations](/en/guide/sharing/integrations) · [Folders](/en/guide/sharing/folders) · [Privacy and security](/en/guide/privacy/overview)