Query security basics

indexes in the Coveo Platform support item-level security, which means that their users can only access the content that they’re allowed to see. Internally, the index removes confidential items from result sets using information retrieved by connectors during the indexing process. The processes of live indexing and incremental refresh keep this information up to date.

Each time a query is executed, the Coveo Platform associates this query to a unique email address. Internally, the Coveo Platform maps this email address to users from different indexed systems, such as a Salesforce user or a Dropbox account, which makes it possible to search securely across many content repositories using a single security identity and search interface.