Set up Nucifra for a team
This page is for the person who approves a connector for an organisation. It answers what Nucifra reaches, how each member signs in, and what to do when somebody leaves.
What the connector can reach
Nucifra reaches one thing: the files stored in the Nucifra account that authorised it. It cannot read a mailbox, a calendar, a repository, or any other system. It holds no access to your identity provider beyond the email address that identifies the account.
| The connector can | The connector cannot |
|---|---|
| List the files in that Nucifra account | Read anything outside that account |
| Add a file | Change the plan |
| Create a temporary public link for a file | See or change payment details |
| Delete a file it is told to delete | Reach another customer’s files |
nucifra_delete_object carries the destructiveHint annotation, so a client
asks the person to confirm before it runs. Keep that behaviour switched on.
Choose how members sign in
One account for each member. Each person signs in with Google or GitHub and authorises the connector for their own account. Files stay separate for each person. Use this when members work on their own material.
One shared account. An administrator creates one Nucifra account and issues an API key from the dashboard. Put that key in the client configuration you distribute. Every member then reads and writes the same files. Use this when a team shares one library of creative material.
A client with no browser, such as an automated job on a server, always uses an API key. See Connect any client for the exact header.
Issue and withdraw a key
Create a key on the API keys screen in the dashboard. Nucifra stores only a hash of it, so nobody can read the key back, not even us. Copy it once.
Turn a key off on the same screen. Every client that holds it stops working immediately. Turning off a key does not delete a file.
What happens to files
Each plan sets how many days Nucifra keeps a file. The free plan keeps a file for 7 days, Starter for 30, and Pro and Team for 90. Nucifra deletes the file when that time ends. Upload it again at any time.
A public link carries its own time limit, one hour by default. After that the link returns HTTP 403 and the file itself is untouched.
Records your legal team will ask for
- Terms of Service
- Privacy Policy
- Data Processing Addendum — names every sub-processor
- Acceptable Use Policy
Write to support@nucifra.com for a security review or a signed agreement.