Each workspace on its own
Every workspace has its own address, and everything in it (people, channels, messages, tasks and files) is kept apart from every other workspace.
Two-step sign-in
Owners and admins must set up two-step sign-in with an authenticator app before they can manage the workspace, and anyone else can turn it on too. Recovery codes cover a lost phone.
Permissions everywhere
Search results, email summaries and phone notifications only ever include what that person may see. Guests never see other channels or anyone's email address.
Your data, your copy
An audit log records sign-ins, invitations and access changes. Owners can export everything in the workspace as a zip at any time, and nothing is used for advertising.