Skip to main content

Security: Internal and Sensitive interactions

Auto-hide internal emails and exclude sensitive interactions from your CRM

Updated this week

Overview

What are internal and sensitive interactions?

Internal and sensitive interactions help teams control what interactions are visible in folk.

  • Internal interactions hide interactions that happen only between teammates in the same workspace.

  • Sensitive interactions limit visibility of specific contacts, domains, or phone numbers to only the participants involved.

Why does it help our customers?

As teams grow, privacy and trust become essential. These settings let you safely sync your email and WhatsApp and manage visibility across sensitive topics (e.g., HR, investors, legal discussions) without exposing sensitive information to the whole workspace.

Who can use it?

  • Available on Premium and Custom plans.

  • Managed by Admins and Owners in your workspace.

  • Contributors cannot access or edit these settings.

Where to find it:

Go to Settings → Security


Internal interactions

What counts as an internal interaction?

An internal interaction is any conversation (email, event, WhatsApp message, etc.) exclusively between workspace team members — i.e. people whose emails or phone numbers are used as Connected sources in folk.

  • Team email → any email address used by a folk user (even inactive sources).

  • Team phone → any phone number used by a folk user.

When the “Hide internal interactions” toggle is ON:

  • folk does not display interactions between team members anywhere in the workspace.

  • Smart fields (like Last interaction, Strongest connection, etc.) remain empty for those team contacts.

  • Users will see a Internal label on the interactions that have been marked as internal

Example:

Maria (maria@folk.app) and Victor (victor@folk.app) exchange emails → this interaction is hidden from everyone in the workspace.

How does the Hide internal interactions toggle work?

When enabled, folk automatically hides all interactions between teammates for non-participants.

Non-participants won’t see interactions appear in the interactions tab. They won't be taken into account into smart fields update too.

What happens when I turn it off?

If you turn off “Hide internal interactions,” all interactions between teammates will become visible across the workspace.

This may expose internal discussions, so we recommend leaving it on unless your team explicitly wants full transparency.

Are logged interactions or campaigns affected?

Campaigns and manually logged interactions are not affected. They are added at the workspace level.


Sensitive Interactions

What are sensitive interactions?

Sensitive interactions are conversations involving specific emails, domains, or phone numbers that your admins or workspace owner marks as confidential.

Only the people directly involved in those interactions can see them.

Example:

If @investor.com is added to your sensitive list, any email with someone from that domain will only be visible to the teammates who were part of the original email conversation.

How does the Sensitive list work?

Admins can define a workspace-wide list of sensitive emails, domains, or phone numbers.

Any interaction that includes one of these values becomes visible only to the participants and hidden from everyone else.

You’ll see a lock icon 🔒 when an interaction is restricted.

Who can manage the Sensitive list?

Only workspace Admins and Owners can view and edit the sensitive list.

Contributors cannot access or modify it.

What can I add to the Sensitive list?

You can add:

  • Individual email addresses (e.g. steve@apple.com)

  • Domains (e.g. @apple.com)

  • Phone numbers (+34656661188, in international format)

What happens when an interaction is marked sensitive?

  • Only the teammates involved in the interaction can see it.

  • Other teammates, even admins, won’t see the interaction

  • The interaction is excluded from shared smart fields (like Team last interaction or Strongest connection).

  • Users will see an Sensitive label on a interaction that comes from a source that’s been added to the sensitive list

Can other users see that an interaction exists?

No, sensitive interactions are completely hidden for non-participants. They won’t appear in the timeline or be referenced in smart fields.

How do I remove something from the sensitive list?

Admins can go to Settings → Security → Sensitive list, hover over the entry, and click Remove. Changes take effect immediately.

What do I see when I shared my source as subject only?

Your teammates will see the interactions with a label Subject only . They won’t have access to the content.

Did this answer your question?