Sign-in methods, SSO enforcement, provisioning, roles, and the audit log, and how to configure each for your organization.

Nucleus OS is built for enterprise security reviews: encryption in transit and at rest, SAML SSO and SCIM provisioning, granular roles, and an audit log of every administrative action.

Method	Notes
Email and password	Available to every workspace.
Google sign-in	People sign in with their Google account.
SAML 2.0 SSO	Sign in through your identity provider. Can be enforced for your domain. See SAML SSO.

Signed-in sessions use short-lived tokens that are refreshed automatically; signing out ends the session on that device.

Recommended configuration

Connect your identity provider

Set up SAML SSO and test it with a non-admin account.

Enforce SSO

Require SSO for your email domain so access is governed by your IdP, including MFA policies.

Turn on SCIM

Enable SCIM provisioning so people who leave lose access automatically.

Review roles

Keep admins to a small group and give subject-matter experts the Creator role. See roles.

Configure tutor scope and visibility

Decide whether the AI tutor may use general knowledge and what managers can see. See AI tutors.

Administrative actions are written to an audit log: role changes, settings changes, enrollment rule changes, exemptions and extensions, content approvals, and exports. Use it for internal reviews and to answer auditors. See Compliance reporting.

Security reviews

Nucleus OS is not yet SOC 2 or ISO 27001 certified. We build to the controls those frameworks describe and can share our security package, including policies and architecture details, and a data processing agreement (DPA). Request them, or send a security questionnaire, through the contact form. More detail is on the Security page.

Report a vulnerability

If you believe you have found a security issue, contact us through the security contact form with as much detail as you can. Please do not test against other customers' data.

Security settings