IF YOU REGISTER FOR A FREE TRIAL OF THE SERVICE, THE APPLICABLE PROVISIONS OF THIS AGREEMENT ALSO GOVERN YOUR USE OF THOSE SERVICES

Terms of Service

These Terms of Service ("Terms") are between you ("you" or "Customer") and Knowi, Inc. ("Knowi," "we," "us," or "our"). Please read them carefully. They form a contract between you and Knowi that governs your access to and use of the Knowi Services. You may use the Services only if you have the power to form a contract with Knowi and are not barred under any applicable laws from doing so. Your use of or registration for any of the Services will constitute your agreement to be bound by these Terms. If you do not agree to be bound by these Terms, you must not use the Services. If you are using the Services on behalf of an organization, unless that organization has a separate paid contract in effect with us, you are agreeing to these Terms for that organization, and representing to Knowi that you have the authority to bind that organization to these Terms (in which event, "you" and "you" will refer to the organization). If you are using the Services on behalf of an organization that has a separate paid contract in effect with us, the terms of that contract will govern your use of the Services.

These Terms may be modified from time to time. The date of the most recent revisions will appear on this page, so please check back often. Your use of or continued access to the Services after any changes constitutes your acceptance of those changes, whether or not you have reviewed them. If you do not agree to changes to the Terms, you must stop using the Services and cancel your user account.

For ease of reference, these Terms are broken into the following sections:

Definitions
Availability of the Services
Your Responsibilities relating to Use of the Services
Fees and Payment
Cancellation of Services
Confidentiality
Ownership
No Warranty
Indemnification
Limitation of Liability
Suspension and Termination of your Use of the Services
General Provisions

Definitions

"Account"

means an online account created by you or on your behalf within the Services.

"Administrator"

means a User you identify as having administrative rights including, without limitation, the permission to add licenses, cancel licenses and define the scope of the Services.

"Affiliate"

means, with respect to a party, any entity which directly or indirectly controls, is controlled by, or is under common control with such party (where "control" means ownership or control, directly or indirectly, of more than 50% of the voting interests of the subject entity).

"Content"

means data, text, audio, video, images or other content.

"Documentation"

means written or online user documentation that describe the functionality, operation, and use of the Services, and that Knowi provides or makes generally available to customers of the Services.

"Services"

refers, collectively, to the hosted storage solution we provide for online storage, sharing and processing of Content, the Software, the Website, and Documentation.

"Software"

means the software used, provided or made available by Knowi for use in connection with the Services. Software includes the Knowi Data Connector Software which is that portion of the Software that is installed on Customer's local server, desktop, mobile or other device (for example, mobile apps, desktop apps, and group apps) and enables a User to submit data to Knowi.

"User"

means an individual who accesses the Services and Software.

"Website"

means any websites owned or operated by Knowi, including those located at and www.knowi.com.
Availability of the Services
- Services.
  
  We will make the Services available for your use on a non-exclusive basis and in strict compliance with these Terms and all applicable laws. Your use includes allowing Users to transmit, store, share, retrieve, and process Content through the Services solely through an Account registered to you and in accordance with the orders you place with Knowi. In the event that your Users exceed the quantity or User type for which you paid, you agree to pay for your additional Users at Knowi's then-current pricing.
- Software Provided for Use with the Services.
  
  Subject to your continued compliance with these Terms, we grant you the nonexclusive, nontransferable, worldwide, personal license to install and use the Knowi Data Connector for the sole purpose of submitting data into Knowi Service.
- Support for the Services.
  
  Knowi will provide the level of support you select in your order from those we make available.
- Updates to the Services.
  
  We reserve the right, in our sole discretion, to change, update, and enhance the Services at any time including to add functionality or features to, or remove them from, the Services. We may also suspend the Services or stop providing the Services all together.
- Free Trials.
  
  If you register on our website or via a Service Order for a Free Trial, we will make the Service available to you under the Free Trial until the earlier of (a) the end of the Free Trial period for which you registered to use the Service, or (b) the start date of any Full Knowi Service subscription ordered by you for such Service, or (c) termination by us in our sole discretion. Additional Free Trial terms and conditions may appear on the Free Trial registration web page. Any such additional terms and conditions are incorporated into this Agreement by reference and are legally binding. We reserve the right, in our absolute discretion, to determine your eligibility for a Free Trial, and, subject to applicable laws, to withdraw or to modify a Free Trial at any time without prior notice and with no liability, to the greatest extent permitted under law. ANY DATA YOU ENTER INTO THE SERVICE, AND ANY CONFIGURATION CHANGES MADE TO THE SERVICE BY OR FOR YOU, DURING YOUR FREE TRIAL WILL BE PERMANENTLY LOST UNLESS YOU PURCHASE A SUBSCRIPTION TO THE SAME SERVICE AS THOSE COVERED BY THE FREE TRIAL OR EXPORT SUCH DATA, BEFORE THE END OF THE FREE TRIAL PERIOD. IF YOUR SUBSCRIPTION DOES NOT INCLUDE FEATURES AVAILABLE IN THE FREE TRIAL, YOU MUST EXPORT YOUR DATA BEFORE THE END OF THE TRIAL PERIOD OR YOUR DATA WILL BE PERMANENTLY LOST. Please review the applicable Documentation for the Service during the Free Trial period so that you become familiar with the functionality and features of the Service before you make your purchase.
Your Responsibilities relating to Use of the Services.
- Passwords and Account.
  
  To obtain access to certain Services, you will be required to obtain an Account with Knowi by completing a registration form and designating a user ID and password. Until you apply for and are approved for an Account, your access to the Services will be limited to those areas of the Services, if any, that Knowi makes available to the general public. You agree and represent that all registration information you provide is accurate, complete, and current, and that you will update it promptly when that information changes. Knowi may withdraw Account approval at any time in its sole discretion, with or without cause. You are responsible for safeguarding the confidentiality of your User ID and passwords, and for all activities that take place with your Account. Knowi will not be liable for any loss or damage arising from any unauthorized use of your Account.
- Notices from Knowi.
  
  You acknowledge that once you have registered with us, we may send you communications or data regarding the Services using electronic means. These may include, but are not limited to (i) notices about your use of the Services, including any notices concerning violations of use, (ii) updates to the Services, (iii) promotional information and materials regarding Knowi's products and services, and information the law requires us to provide. We give you the opportunity to opt-out of receiving certain of these communications from us by following the opt-out instructions provided in the message. However, even if you opt-out, you understand that we may continue to provide you with required information by e-mail at the address you specified when you signed up for the Services or via access to a website that we identify. Notices we e-mail to you will be deemed given and received when the e-mail is sent. If you don't agree to receive required notices via e-mail, you must stop using the Services. If you provide Knowi with legal notices, you must transmit it to us via email to [email protected]. Any such notice, in either case, must specifically reference that it is a notice given under these Terms.
- Notices from You regarding Unauthorized Use.
  
  You agree to notify us promptly in writing when you become aware of any unauthorized use of an Account, the Content or the Services, including if you suspect there has been any loss, theft or other security breach of your password or user ID. If there is an unauthorized use by a third party which obtained access to the Services through you or your Users, whether directly or indirectly, you agree to take all steps necessary to terminate the unauthorized use. You also agree to provide Knowi with any cooperation and assistance related to that unauthorized use which we reasonably request.
- Content.
  
  Knowi does not monitor any data transmitted or processed hrough, or stored in, the Services. You agree that you:
  - are responsible for the accuracy and quality of all Content that is transmitted or processed through, or stored in, your Account;
  - will ensure that the Content (including its storage and transmission) complies with these Terms, and applicable laws and regulations;
  - will promptly handle and resolve any notices and claims from a third party claiming that any Content violates that party's rights, including regarding take-down notices pursuant to the Digital Millennium Copyright Act;
  - will maintain appropriate security, protection and backup copies of the Content, which may include (A) the use of encryption technology to protect the Content from unauthorized access and (B) routine archiving of the Content. Knowi will have no liability of any kind as a result of any deletion, loss, correction, or destruction of Content or damage to or failure to store or encrypt any Content.
- Use Restrictions.
  
  You are responsible for Users' compliance with these Terms and for the quality, accuracy and legality of the Content. You will not, and will ensure that your Users do not
  - use the Services in any manner or for any purpose other than as expressly permitted by these Terms including, without limitation, allowing Power Users to use the logins of your Business Partner Users;
  - sell, rent, resell, lease, or sublicense the Services to any third party;
  - modify, tamper with or otherwise create derivative works of the Services;
  - reverse engineer, disassemble or decompile the Services, or attempt to derive source code from the Services;
  - remove, obscure or alter any proprietary right notice related to the Services;
  - use the Services to send unsolicited or unauthorized junk mail, spam, chain letters, pyramid schemes or any other form of duplicative or unsolicited messages;
  - store or transmit Content: (A) containing unlawful, defamatory, threatening, pornographic, abusive, or libelous material, (B) containing any material that encourages conduct that could constitute a criminal offense, or (C) that violates the intellectual property rights or rights to the publicity or privacy of others;
  - use the Services to store or transmit viruses, worms, time bombs, Trojan horses or other harmful or malicious code, files, scripts, agents or programs;
  - interfere with or disrupt servers or networks connected to the Services or the access by other Knowi client to the servers or networks, or violate the regulations, policies or procedures of those networks;
  - access or attempt to access Knowi's other accounts, computer systems or networks not covered by these Terms, through password mining or any other means; or
  - access or use the Services in a way intended to avoid incurring fees, exceeding usage limits and the like.
- Third Party Services and Content.
  
  All transactions using the Services are between the transacting parties only. The Services may contain features and functionalities linking or providing you with certain functionality and access to third party content, including Web sites, directories, servers, networks, systems, information and databases, applications, software, programs, products or services, and the Internet as a whole. You acknowledge that Knowi is not responsible for such content or services. We may also provide some content to you as part of the Services. However, Knowi is neither an agent of any transacting party nor a direct party in any such transaction. Any of those activities, and any terms associated with those activities, are solely between you and the applicable third-party. Similarly, we are not responsible for any third party content you access with the Services, and you irrevocably waive any claim against Knowi with respect to such sites and third-party content. Knowi has no liability, obligation or responsibility for any such correspondence, purchase or promotion between Customer and any such third-party. You are solely responsible for making whatever investigation you feel is necessary or appropriate before proceeding with any transaction with any of these third parties and your dealings with any third party related to the Services, whether online or offline, including the delivery of and payment for goods and services. In the event you have any problems resulting from your use of a third party service, or suffer data loss or other losses as a result of problems with any of your other service providers or any third-party services, we are not responsible unless the problem was the direct result of our breaches.
Fees and Payment
- Fees.
  
  You agree to pay, using a valid credit card (or other form of payment which we may accept from time to time), the charges and fees (such as recurring monthly or annual fees) set forth in Schedule A, Taxes (as defined below), and other charges and fees incurred in order to access the Services. You will pay Fees in the currency we quoted for your account (and we reserve the right to change the quoted currency at any time). We will automatically charge your credit card or other account at the start of the billing period and at the start of each renewal period. Except as specifically set forth in this section, all Services are prepaid for the period selected (monthly, annually or otherwise) and are non-refundable. This includes accounts that are renewed.
- Fees for Upgrade.
  
  If you upgrade or expand consumption of the Services , additional fees may be due at Knowi's then-current pricing. If additional fees are due, those fees will be immediately charged to your credit card or other account and will apply for the entire month in which the Services Upgrade occurred. If you have paid for an annual period, Services Upgrades will be coterminous with the affected Services period.
- Fee Increases.
  
  We will notify you in advance, either through a posting on this Website or by email to the address you have most recently provided to us, if we increase Fees or institute new charges or fees. Any increase in Fees will take effect at the beginning of the next renewal subscription term for the Services. For example, if you pay monthly, your use of the Services will be charged at the new price when Services are renewed in the month that follows the notice. If you don't agree to these changes, you must cancel and stop using the Services.
- Invoicing and Payment Terms.
  
  You agree to keep all information in your billing account current. You may change your payment method or modify your billing account information at any time by using the means provided on the Website. Your notice to us will not affect charges we submit to your billing account before we reasonably could act on your request. In the event that we invoice you, then all fees will be due and payable upon receipt. We reserve the right to charge, and you agree to pay, a late fee on past due amounts. The late fee will be equal to the lesser of 1.5% of the unpaid amount each month or the maximum amount allowed by applicable law. We may use a third party to collect past due amounts. You must pay for all reasonable costs we incur to collect any past due amounts, including reasonable attorneys' fees and other legal fees and costs. In addition, we may suspend your access to the Services, or cancel the Services, if your account is past due.
- Taxes.
  
  Fees are exclusive of Taxes and you will pay or reimburse Knowi for all Taxes arising out of these Terms, whether assessed at the time of your purchase or are thereafter determined to have been due. For purposes of these Terms, "Taxes" means any sales, use and other taxes (other than taxes on Knowi's income), export and import fees, customs duties and similar charges applicable to the transactions contemplated by these Terms that are imposed by any government or other authority. You agree to promptly provide Knowi with legally sufficient tax exemption certificates for each taxing jurisdiction for which you claim exemption.
Cancellation of Services

To cancel the Services, you must provide us with at least 30 days' notice and follow the process we specify on the Website. If you cancel, the Services will end at the end of your current Services period following the 30 days' notice. If you fail to cancel as required, we will automatically renew the Service for the same term and will charge your payment information on file with us commencing on the first day of the renewal term.
Confidentiality
- Description of Confidential Information.
  
  In connection with each party's rights and obligations under these Terms, each party (as the "disclosing party") may disclose to the other party (as the "recipient") certain of its confidential or proprietary information ("Confidential Information"). In the case of Knowi, the Services, these Terms and any other proprietary or confidential information we provide to you constitute Knowi Confidential Information. In the case of Customer, Content provided to Knowi by Customer constitutes Customer Confidential Information.
- Protection of Confidential Information.
  
  Each party as recipient agrees: (i) to exercise at least the same degree of care to safeguard Confidential Information of the disclosing party as the recipient exercises to safeguard the confidentiality of its own confidential information, but not less than reasonable care; (ii) to use the disclosing party's Confidential Information only in connection with exercising its rights and performing its obligations under these Terms; and (iii) to not disclose or disseminate the disclosing party's Confidential Information to any third party and that the only employees and contractors who will have access to the disclosing party's Confidential Information will be those with a need to know who have agreed to abide by the obligations set forth in this Section pursuant to a written confidentiality agreement.
- Protection of Content.
  
  We agree to maintain appropriate administrative, physical, and technical safeguards to protect the security, confidentiality, and integrity of the Content. The third party data center providers utilized by Knowi in the provision of the Services will maintain at a minimum SSAE 16 audit certification or its equivalent. Except as requested by you in connection with customer support, we will not (i) modify Content, (ii) disclose Content except pursuant to the requirements of a governmental agency, by operation of law, to investigate occurrences that may involve violations of system or network security, or as you expressly permit in writing, or (iii) access Content except to provide the Services or to address other service or technical problems.
- >Exceptions to Confidentiality.
  
  Information will not be deemed Confidential Information of either of us under these Terms if such information: (i) is or becomes rightfully known to the recipient without any obligation of confidentiality or breach of these Terms; (ii) becomes publicly known or otherwise ceases to be secret or confidential, except through a breach of these Terms by the recipient of such Confidential Information; or (iii) is independently developed by the recipient of such Confidential Information without breach of these Terms. Confidential Information will remain the property of the disclosing party.
Ownership
- Ownership by Customer.
  
  As between Customer and Knowi, Customer or its licensors own all right, title and interest in and to the Content. Customer hereby grants Knowi the right to transmit, use, modify, adapt, reproduce, display or disclose the Content solely (i) to provide the Services to Customer or any User, (ii) to comply with any request of a governmental or regulatory body (including subpoenas or court orders) or as otherwise required by law, (iii) for statistical use (provided that such data is not personally identifiable), and (iii) as necessary to monitor and improve the Services. Customer represents and warrants that Customer has all rights in the Content necessary to grant these rights and use the Services, and that the transmission, storage, retrieval, and processing of the Content do not violate any law or these Terms.
- Ownership by Knowi.
  
  As between Knowi and Customer, Knowi or its licensors own and reserve all right, title and interest in and to the Services and all hardware, software and other items used to provide the Services. No title to or ownership of any proprietary rights related to the Services is transferred to Customer or any User pursuant to these Terms or any transaction contemplated by these Terms. Knowi reserves all rights not explicitly granted to Customer. Knowi is free to use any comments, suggestions, recommendations, and other feedback you provide with respect to the Services for any purpose, without obligation.
No Warranty

KNOWI PROVIDES THE SERVICES "AS IS," "WITH ALL FAULTS," AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, KNOWI MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY OR OTHERWISE. KNOWI SPECIFICALLY DISCLAIMS, WITHOUT LIMITATION, ANY WARRANTY THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE OR FREE OF HARMFUL COMPONENTS, THAT THE CONTENT WILL BE SECURE OR NOT OTHERWISE LOST OR DAMAGED, OR ANY IMPLIED WARRANTY OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, AND ANY WARRANTY ARISING OUT OF ANY COURSE OF PERFORMANCE, COURSE OF DEALING OR USAGE OF TRADE. SOME JURISDICTIONS DO NOT ALLOW THE FOREGOING EXCLUSIONS. IN SUCH AN EVENT SUCH EXCLUSION WILL NOT APPLY SOLELY TO THE EXTENT PROHIBITED BY APPLICABLE LAW.
Indemnification

To the maximum extent permitted by applicable law, you agree to defend, indemnify, and hold harmless Knowi, its officers, directors, employees, and agents, against any cost, loss, damage, or other liability arising from any third party demand or claim that any Content provided by you, or your use of the Services, in breach of these Terms: (a) infringes a registered patent, registered trademark, or copyright of a third party, or misappropriates a trade secret (to the extent that such misappropriation is not the result of Knowi's actions) or (b) violates applicable law or these Terms. Knowi will provide you with notification of any such claim or demand that is subject to your indemnification obligation.
Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT (a) WILL THE LIABILITY OF KNOWI, ITS AFFILIATES, OFFICERS, EMPLOYEES, OR AGENTS FOR ANY AND ALL CLAIMS RELATING TO THE SERVICES EXCEED THE GREATER OF $100.00 OR THE TOTAL AMOUNT OF FEES THAT YOU PAID US DURING THE PREVIOUS THREE MONTH PERIOD AND (b) WILL KNOWI, ITS AFFILIATES, OFFICERS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, COVER OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOST PROFITS, REVENUE, GOODWILL, USE OR CONTENT) HOWEVER CAUSED, UNDER ANY THEORY OF LIABILITY, INCLUDING, WITHOUT LIMITATION, CONTRACT, TORT, WARRANTY, NEGLIGENCE OR OTHERWISE, EVEN IF KNOWI HAS BEEN ADVISED AS TO THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE EXCLUSIONS OR LIMITATIONS MAY NOT APPLY TO YOU. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY FROM STATE TO STATE.
Suspension and Termination of your Use of the Services
- General.
  
  Knowi reserves the right to temporarily suspend or terminate your access to the Services at any time in Knowi's sole discretion, with or without cause, and with or without notice, without incurring liability of any kind. For example, we may suspend or terminate your access to or use of the Services for: (i) the actual or suspected violation of these Terms; (ii) the use of the Services in a manner that may cause Knowi to have legal liability or disrupt others' use of the Services; (iii) the suspicion or detection of any malicious code, virus or other harmful code in your Account; (iv) downtime, whether scheduled or recurring; (e) your use of excessive storage capacity or bandwidth; or (v) unplanned technical problems and outages. If, in our determination, the suspension might be indefinite or we have elected to terminate your access to the Services, we will use commercially reasonable efforts to notify you through the Services. You acknowledge that if your access to the Services is suspended or terminated, you may no longer have access to the Content that is stored with the Services.
- Termination for Lack of Activity.
  
  In addition to our other rights of termination, if your Account is not currently subject to a paid subscription plan with us, we may terminate your Account if: (i) you do not engage in any activity in the Account within 30 days after registering for the Services, or (ii) you do not engage in any activity in an Account for 120 consecutive days. In the event of such termination, any of your Content may be lost.
- Post-Termination Obligations.
  
  Upon termination of these Terms for any reason, all of your rights to use or access the Services will cease. You agree, within five days of such termination, to destroy all copies of the Software, the Documentation, and any Confidential Information of Knowi, including any Documentation in written or electronic form and any Software stored on your servers or other systems. In addition, if requested by Knowi, you will promptly provide to Knowi a written certification signed by an authorized representative certifying that all copies of the Software and any written or electronic documentation and Confidential Information of Knowi have been destroyed. For 30 days following the expiration of the Termination of these Terms or the applicable subscription term for which you have paid, and subject to your prior written request, we will grant you with limited access to the Services solely for purposes of your retrieval of the Content. After that 30-day period, Knowi has no further obligation to maintain the Content and will delete the Content unless legally prohibited.
- Survival.
  
  The terms of any sections that by their nature are intended to extend beyond termination will survive termination of these Terms for any reason.
General Provisions
- Governing Law.
  
  These Terms will be construed and enforced in all respects in accordance with the laws of the State of California, without reference to its choice of law rules. Any dispute between the parties will be brought in a court in Alameda County and each party irrevocably waives any claim that such court does not have personal jurisdiction over the party. All use of the Services is expressly governed by any applicable export and import laws, and Customer must comply with all such laws. Claims arising out or related to these terms must be filed within one year of the date on which the claim arose unless local law requires a longer time to file claims. If a claim is not filed accordingly, then it is permanently barred.
- Government Users.
  
  If you are a U.S. government entity, you acknowledge that any Software and Documentation are provided as "Commercial Items" as defined at 48 C.F.R. 2.101, and are being licensed to U.S. government end users as commercial computer software subject to the restricted rights described in 48 C.F.R. 2.101 and 12.212.
- Independent Contractors; Third Party Beneficiaries.
  
  You and we are independent contractors, and nothing in these Terms creates a partnership, employment relationship or agency. There are no third-party beneficiaries of these Terms. Knowi may subcontract portions of the Services provided that Knowi shall remain responsible for all such obligations under these Terms.
- Waiver.
  
  Our failure to enforce any of these Terms will not be considered a waiver of the right to enforce them. Our rights under these Terms will survive any termination.
- Assignment.
  
  You may not assign these Terms or your rights and obligations under them, in whole or in part, to any third party without our prior written consent, and any attempt by you to do so will be invalid.
- Severability.
  
  Should any part of these Terms be held invalid or unenforceable, that portion will be construed consistent with applicable law and the remaining portions will remain in full force and effect.
- Force Majeure.
  
  Neither party will be liable to the other for any delay or failure to perform its obligations under these Terms (excluding payment obligations) if the delay or failure arises from any cause or causes beyond that party's reasonable control.
- Public Announcement.
  
  Knowi reserves the right to release a press announcement regarding the parties' relationship, and to include Customer's name on Knowi's customer lists on Knowi's web site and in any other marketing materials.
- Entire Agreement and Changes.
  
  These Terms, including fees for Services on the Website, constitutes the entire agreement, and supersedes any and all prior agreements, between the parties with regard to the subject matter hereof. Knowi reserves the right to modify or replace these Terms at any time in its sole discretion. Knowi will indicate at the top of these Terms the date these Terms were last updated. Any changes will be effective upon posting the revised version of these Terms on the Services (or such later effective date as may be indicated at the top of the revised Terms). Customer's continued access or use of any portion of the Services constitutes Customer's acceptance of such changes. If Customer doesn't agree to any of the changes, Customer must cancel and stop using the Services.
- Privacy.
  
  In order to operate and provide the Services, Knowi collect certain information about Customer. As part of the Services, Knowi may also automatically upload information about Customer's computer or other device, Customer's use of the Services, and the Services performance. Knowi will use and protect that information as described in the privacy policy located on the Website ("Privacy Policy"). Customer further acknowledges and agrees that Knowi may access or disclose information about Customer, including the content of Customer communications, in order to: (i) comply with the law or respond to lawful requests or legal process; (ii) protect the rights or property of Knowi or Knowi's customers, including the enforcement of Knowi's agreements or policies governing Customer's use of the Services; or (iii) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of Knowi employees, customers, or the public.
- DMCA.
  
  We respect the intellectual property of others, and reserve the right to delete or disable Content that appears to violate these terms or applicable law. The Digital Millennium Copyright Act of 1998 (the "DMCA") provides recourse for copyright owners who believe that material appearing on the Internet infringes their rights under U.S. copyright law. If you believe in good faith that Content infringes your copyright, you (or your agent) may send us a notice requesting that the Content be removed or access to it blocked. Federal law requires that your notification include the following information: (i) a physical or electronic signature of a person authorized to act on behalf of the owner of an exclusive right that is allegedly infringed; (ii) identification of the copyrighted work claimed to have been infringed or, if multiple copyrighted works at a single online site are covered by a single notification, a representative list of such works at that site; (iii) identification of the material that is claimed to be infringing or to be the subject of infringing activity and that is to be removed or access to which is to be disabled and information reasonably sufficient to permit us to locate the material; (iv) information reasonably sufficient to permit us to contact you, such as an address, telephone number, and, if available, an electronic mail; (v) a statement that you have a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law; and (vi) a statement that the information in the notification is accurate, and under penalty of perjury, that you are authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.

The notification must be sent to [email protected]

We provide the above contact information for purposes of the DMCA only and reserve the right to respond only to correspondence that is relevant to this purpose.

What information do we collect?

We collect information from you when you register on our site, products and services, place an order, subscribe to our newsletter or fill out a form. When ordering or registering on our site, as appropriate, you may be asked to enter your name, e-mail address or credit card information. You may, however, visit our site anonymously.

What do we use your information for?

Any of the information we collect from you may be used to personalize your experience, to improve our service offerings or to improve customer service, or to process transactions or to send periodic emails if indicated as such or transactional emails pertaining your order.

Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested.

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server. All supplied data and sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential.

After a transaction, your credit card information will not be stored on our servers.

Do we use cookies?

Yes (Cookies are small files that a site or its service provider transfers to your computers hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information

We use cookies to understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

California Online Privacy Protection Act Compliance

Because we value your privacy we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act. We therefore will not distribute your personal information to outside parties without your consent.

Childrens Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Childrens Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.

Online Privacy Policy Only

This online privacy policy applies only to information collected through our website, products and services and not to information collected offline.

Terms and Conditions

Please also visit our Terms and Conditions section establishing the use, disclaimers, and limitations of liability governing the use of our website, products and services.

Your Consent

By using our site, products and services you consent to our privacy policy.

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page.

Contacting Us

If there are any questions regarding this privacy policy you may contact us by emailing us at [email protected]

User Settings, Access, Permissions & Security

Knowi provides a variety of powerful options on user rights, access management and external authentication methods for both internal usage and embedded usage modes.

Please contact your account manager for any questions on mapping out the permissions model to your own enterprise level permissions model.

User Settings

Navigate to the User Settings in Knowi to view, manage, or update their preferences for Account Settings, Plan Details, Usage, Team, Roles, and External Authentication from one central place.

Navigating to the User Settings

Click on the user profile icon from the bottom-left corner of the interface, select User Settings, and you will be navigated to the User Settings menu

Managing Account Settings

Manage your account settings to view and manage the following:

EMAIL/LOGIN: This is the email address linked to this account. While logging in to Knowi, this email address will work as the username. Please note that this field is not editable.
NAME: Edit the name of the customer.
PASSWORD: This is the password associated with this account. Click the Change Password button to add a new password.
TIME ZONE: Select the time zone that will be used when this customer will run the Query. Supported Timezones
DATE FORMAT: Change the default date format displayed to the user. There are three date formats available(MM/dd/yyyy, dd/MM/yyyy, yyyy/MM/dd). By default, the date formats are displayed in the US month-first format.
LOCALE: This translates the user-interface language and model to the selected locale for the customer. Currently, supported locales include- en (English), de (German), and fr (French).
API KEY: View the API key.
ALWAYS SHARE TO GROUP: This automatically shares all assets including any datasources, queries, widgets, and dashboard to the selected groups. Click on the edit to add, remove, or change the group
DEFAULT DASHBOARD: Click on the edit to select the default dashboard that will appear upon login.
MANAGEMENT API: Enable Management API to generate the client ID and client secret. This will allow the external services and apps to manage users and groups, datasources, queries, dashboards, and widgets programmatically.
TWO FACTOR AUTHENTICATION: Enable Two Factor Authentication (2FA). This adds an extra security layer and the customer will be prompted to enter the verification code received via text message while logging in to the Knowi account.

Note: While the admin will have the access to view and manage all the aforesaid settings, the user will have access to view and manage only 1, 2, 3, 4, 5, 6, and 10 above. The viewer will have access to only view the set configurations for 1, 2, 3, 4, 5, and 10 above.

To learn more about different user roles in Knowi i.e. - Viewer, User, and Admin, please refer to the documentation on User Roles.

On scrolling down further, the admin will be able to view and manage the following customer settings.

GLOBAL HEADER: Define HTML snippet to globally apply a custom Header across all dashboards. Headers can also be set at a specific dashboard via the Dashboards settings.
GLOBAL FOOTER: Define HTML snippet to globally apply a custom footer across all dashboards. Footers can also be set at a specific dashboard via the Dashboards settings.
PASSWORD EXPIRY: Set the password expiry in days. Set 0 for the password to never expire.
DEFAULT TIME ZONE: Change the default time zone. If no default time zone is set, Knowi will default it to America/Los_Angeles.
DEFAULT DATE FORMAT: Change the default account date format displayed to the user. By default, the date formats are displayed in the US month-first format.
NLP SETTING: Provides different NLP settings across Knowi. The different settings available are:

NLP Across Datasets - Enables NLP interface across datasets NLP Bot Integration -Enables NLP interface for slack/teams NLP Favorites - Configure a list of NLP queries per category type displayed when a user types in /knowi. Typically, this would be the most commonly used questions. NLP Synonyms - Configure a list of NLP synonyms. In the format: FieldName1=Synonym1,Synonym2,Synonym3 NLP Visualization first tab - On the dashboard, NLP search defaults to show the visualization first rather than the analyze grid.
Instantsights: Provides automated text-based insights on widgets upon user clicks when turned on.
Instantsights Icon Default: The default setting for Widget InstantSights Icon on each dashboard. Can be editable and overridden in dashboard settings.
SSO Token: To generate a SSO token
TUNNEL INFORMATION: Enables the Tunnel key to be used with your datasources. Tunnel information can be used to connect to datasources that are inside your internal network. See the Datasource Tunneling for more details.
SESSION TIMEOUT: Set the Session timeout in minutes. Blank implies default which will set the session timeout to 30 mins.
CUSTOM LOGO: Set a link to your own logo image instead of the Knowi logo. The recommended size of the custom logo is 35px width and 36px height, transparent.
CHART COLOR PALETTE: This will overwrite the default color palette for charts. Add upto 10 colors to the palette. These will be the default colors for chart legends unless you override them at the chart level.
CUSTOM SMTP SERVER SETTINGS: Enable this to set up your custom mail SMTP server to send email reports, alerts, etc. from your mailbox.
OpenAI Integration: OpenAI integration to generate queries with using natural language
Force 2FA: Force Two-Factor Authentication for all users. A pop up is displayed every time they login

Managing Current Plan

Navigate to the Plan Details tab to view the current plan and the features available within the same. Click on the Upgrade Plan button to send the Plan Upgrade request.

Account Usage Details

Navigate to the Usage tab to view the total number of widgets and rows running under the current account.

Managing Users & Groups

Navigate to the Team tab to perform actions like: Adding the users, Editing the users, Adding Groups, Removing the users, etc.

Custom Roles & Permissions

If the built-in roles don't meet the specific needs of your organization, you can add your own custom roles by navigating to the ROLES tab. Just like built-in roles, you can assign custom roles to users. See Custom Roles & Permissions for more information.

External Authentication Options

By default, the Knowi completes the user authentication through an email address and password, however, you can also configure external authentication via SAML (including Okta) and LDAP. For an extra security layer, two-factor authentication can also be used.

To know more about LDAP configuration, please refer to the documentation- External Authentication from LDAP.

To know more about SAML configuration, please refer to the documentation- External Authentication from SAML.

Supported Timezones

Refer to the timezones supported by Knowi here.

User Roles

We offer three types of roles by default: viewer, user and admin.

In case of specific access management requirements you can create your own custom role anytime

Viewers

As a View�only user, you are limited to consuming dashboards only. While you can download data associated with the widgets and run your own ad-hoc analysis on the data contained within the dashboards that you have access to, you will not be able to save or create any dashboards of your own. This role also cannot create any data assets, including datasources or queries. In addition, you will not be able to invite or manage other users or groups.

Notice the menu structure on the left is limited.

Dashboards

Upon logging into your account, you will be taken directly to your default dashboard. (Details on how to change your default dashboard can be found here).

Clicking on the Dashboard icon in the left sidebar will then reveal a dropdown list of all dashboards currently shared with you. Clicking on a Dashboard name will refresh the main page with the contents of the selected dashboard.�You also have the ability to search for a specific dashboard by using the Search function within the Dashboard selector.

Dashboard PDF Export�

In the top right corner of the Dashboard, you will find an option to export the currently displayed dashboard as a PDF. If the dashboard contains one or more data grids, then these will appear as Appendices to the main Report.

Dashboard Filtering�

All data contained within the Dashboard can be filtered by various key fields present in the underlying data. The Filter icon can be found in the top right corner of the Dashboard.

Clicking on the filter icon will present you with a sliding Filter Window. Click here on Add button and select the Filter option to edit the filter.

All fields that have been made available to you for selection by the dashboard creator will appear in the Field to filter box. You simply select a field to filter on, followed by the condition (equals, not equals, etc) and then the required value.

You can create as many filters as you wish by clicking on the +Add button. To remove a filter, click on the delete icon.

For more information, please refer to the Filters section of our documentation.

Widgets

Each Dashboard will contain one or more Widgets. A Widget is simply another term for a visualization of the underlying data.

Widget Options

In the top right corner of each Widget, you will find a selection of icons that allow you to search, analyze, filter, and do more settings.

Statistical Information

Clicking on this icon will present you with a statistical overview of all the columns within the Widget, along with a pairwise scatterplot to visualize any data interaction.

Search

If the Widget type is a Data Grid, then the Search Icon will be available. Clicking on this icon will allow you to enter search criteria to find specific rows of interest.

Filters

Basic filtering can be used to set filtering on the data with help of filter icon. For more information, please refer Widget Filters section of our documentation.

Widget Settings

Clicking on the Settings icon will open up access to 4 further Widget functions. These are: Analyze, Data, Refresh & Maximize.

Analyze

Clicking on the Analyze option will take you to the Analyze Grid. From here you will be able to perform ad-hoc analysis of the data.�

The user can elect to drag and drop metrics from the left-hand side, into the metrics, grouping, sort, and filter areas to slice and dice the data.

On Analyze Grid, you can perform specific function by using different buttons and icons as given below:

Add Function
Add Function button allows you to create new derived fields and manipulate data that is already on the grid. Add Function leverages the power of Cloud9QL. More details can be found here.

Add Step
Add Step button leverages the power of being able to perform sequential Cloud9QL operations upon the grid. For example, transforming data and then aggregating would be a 2 step process.�

Statistic
This icon will display statistical information for the grid and a whole, along with the option to display a pairwise scatterplot of data interactions.

Download
You can download all of your data to a CSV by clicking on the download icon.

Refresh
This icon resets to the original dataset and removes the current analysis.

Help
This help icon gives information about how to create your own analysis using the data of this section.

This analyze section is divided into two heads: Data Transformation and Visualization

Data Transformation: This section represents the widget data in a grid form.

Visualization: This section allows you to see the widget data as a visual

Please refer to the Visualization�section of our documentation for more information.

Data

The Data option will allow you to view the data for the selected widget, view the corresponding data types, and also to download the data if required.

Refresh

Refresh resets any widget filtering back to its default state.

Maximize

This will maximize the widget to fill the whole page.

User Settings

User settings can be found in the bottom left corner of the screen. From here, a user can change their password and their default timezone.

Users

User roles can:

Invite other users
Create and share dashboards, widgets, queries, datasources, agents
Create Email Reports
Create and manage Trigger Notifications
Create their own groups
Set Filters (dashboard or user level)

The example below illustrate the User Settings options available to a User.

Admin Users

Admin have all the rights to that of the user, plus the ability to edit/modify other users and their associated rights.

Team management for an Admin viewer:

Custom Roles & Permissions

If the built-in roles don't meet the specific needs of your organization, you can create your own custom roles. Just like built-in roles, you can assign custom roles to users. Custom roles can be shared across all users within the customer. Custom roles can be created using Roles tab on user settings dialog.

Custom Role Example

The following shows what a custom role looks like on the UI. This custom role can be used to restrict delete operations among queries/widgets/datasource and many other things.

When you create a custom role, it appears in the roles list with system flag as false.

Steps to create a custom role

Steps to create a custom role

When you create a custom role, you need to know the provided operations that are available to define your permissions. To view the list of operations, you can use list that is available as soon as your press on Add Role button. Each permissions has a clarification message that explains what the role does, in case you still have questions you contact your product partner and we'll change the message to be more explicit on the matter. To specify permissions that you need simply check them from the list. Remove All & Select All buttons should help you to enable & disable all roles in the list.
Create the custom role

You can use Add Role dialog to create the custom role. Typically, you start with an existing built-in role, copy it and then modify it for your needs. Then you just simply save it and preview created role in the list.
Test the custom role

Once you have your custom role, you have to test it to verify that it works as you expect. If you need to make adjustments later, you can update the custom role.

For a step-by-step tutorial on how to create a custom role, see

Query

clone a query (query:clone): Allows the users to clone a Query. When disabled, the user cannot clone a Query, which removes the option to clone a Query.
create a query (query:create): Allows the users to create a Query. When disabled, the users cannot create a Query.
delete a query (query:delete): Allows the users to delete a Query. When disabled, the user cannot delete a Query and removes the option to delete a Query.
edit a query (query:edit): Allows the users to edit a Query. When disabled, the user cannot edit and save an existing Query.
see list of queries (query:list): Allows the users to see the list of Queries. When disabled, the user cannot see the Query list when the Queries tab is selected.
share a query (query:share): Allows users to share a Query. When disabled, the users cannot see an option to share a Query.

Dashboard

generate a dashboard with AI (dashboard:aigen): Allows the users to generate a Dashboard. When disabled, the user cannot generate a Dashboard, which removes the option to generate a Dashboard.
clone a dashboard (dashboard:clone): Allows the users to clone a Dashboard. When disabled, the user cannot clone a Dashboard, which removes the option to clone a Dashboard.
create a dashboard (dashboard:create): Allows the users to create a Dashboard. When disabled, the users cannot create a Dashboard.
delete a dashboard (dashboard:delete): Allows the users to delete a Dashboard. When disabled, the user cannot delete a Dashboard and removes the option to delete a Dashboard.
edit a dashboard (dashboard:edit): Allows the users to edit a Dashboard. When disabled, the user cannot edit and save an existing Dashboard.
see list of dashboards (dashboard:list): Allows the users to see the list of Dashboards. When disabled, the user cannot see the Dashboard list when the Dashboards tab is selected.
access dashboard Presenter (dashboard:presenter): Allows users to access dashboard Presenter.
share a dashboard (dashboard:share): Allows users to share a Dashboard. When disabled, the users cannot see an option to share a Dashboard.
share dashboard to PDF (dashboard:share-pdf): Allows users to share a Dashboard as PDF. When disabled, the users cannot see an option to share a Dashboard as a PDF.
share dashboard to PowerPoint (dashboard:share-ppt): Allows users to share a Dashboard as PPT. When disabled, the users cannot see an option to share a Dashboard as a PPT.
manage dashboard secure share URL (dashboard:share-secure-url): Allows users to manage dashboard secure share URL. When disabled, the users cannot see an option to manage a Dashboard secure share URL.
manage dashboard share URL (dashboard:share-url): Allows users to manage dashboard share URL. When disabled, the users cannot see an option to manage a Dashboard share URL.

Datasource

clone a datasource (datasource:clone): Allows the users to clone a Datasource. When disabled, the user cannot clone a Datasource, which removes the option to clone a Datasource.
create a datasource (datasource:create): Allows the users to create a Datasource. When disabled, the users cannot create a Datasource.
delete a datasource (datasource:delete): Allows the users to delete a Datasource. When disabled, the user cannot delete a Datasource and removes the option to delete a Datasource.
edit a datasource (datasource:edit): Allows the users to edit a Datasource. When disabled, the user cannot edit and save an existing Datasource.
see list of datasources (datasource:list): Allows the users to see the list of Datasources. When disabled, the user cannot see the Datasource list when the Datasources tab is selected.
share a datasource (datasource:share): Allows users to share a Datasource. When disabled, the users cannot see an option to share a Datasource.

Widget

clone a widget (widget:clone): Allows users to clone a widget. When disabled, the user cannot see an option to clone the widget.
create a widget (widget:create): Allows the users to create a new widget. When disabled, the user cannot see an option to create a new widget, which is not the same as cloning a widget.
delete a widget (widget:delete): Allows the users to delete a widget. When disabled, the users cannot see an option to delete a widget.
edit a widget (widget:edit): Allows the users to change widget settings (Visualization tab). When disabled, the user cannot make changes to the Visualization tab.
read widget instantsights (widget:instantsights:read): Allows users to have read access to widget instantsights. When checked, users can only view the instantsights but not configure them.
access widget instantsights (widget:instantsights:write): Allows users to control access to widget instantsights. When disabled, the user cannot edit the widget instantsights settings.
see list of widgets (widget:list): Allows the users to see the widgets list. When disabled, the users cannot see the widget button on the navigation pane, and the widgets list is empty.
manage widgets (widget:manage): Allows the users to select manage widgets from the widgets pane. When disabled, the manage widgets option is unavailable on the widgets pane.
share a widget (widget:share): Allows users to share widgets. When disabled, the users cannot share widgets.
manage widget secure share URL (widget:share-secure-url): Allows users to share via secure URL. When disabled, the option to generate a secure share URL is unavailable.
manage widget share URL (widget:share-url): Allows users to share via secure URL. When disabled, the option to generate share URL is unavailable.

User

create a user (user:create): Allows the users to create a user. When disabled, the users cannot create a user.
delete a user (user:delete): Allows the users to delete a user. When disabled, the option to delete a user is removed.
edit a user (user:edit): Allows the users to edit a user (user role, permissions, filters, etc). When disabled, the option to edit a user is removed.
invite new users (user:invite): Allows the users to invite new users. When disabled, the option to invite new users is removed.
see list of users (user:list): Allows the users to see a user list. When disabled, the user is unable to view the user list.
login as another user from user settings (user:login-as): Allows the users to login as another user. When disabled, the users cannot log in as another user through the team page.
allows user to see user-profile/logout section (user:profile): Allows the user to see the bottom left user icon. When disabled, the bottom left user icon is removed, and the user cannot log out or access user settings.
manage user account settings (user:settings:account): Allows the user to see the bottom left user icon - the ability to manage user account settings. When disabled, the user cannot see user settings but can log out.
manage always share to group (user:settings:always-share-to-group): Allows the user to manage ?always share to group?. When disabled, the user cannot manage ?always share to group?.
manage API KEY (user:settings:api-key): Allows the users to manage the API key. When disabled, the user cannot manage the API key.
manage default dashboard (user:settings:default-dashboard): Allows the user to manage the default dashboard. When disabled, the user cannot view/select the default dashboard.
access LDAP tab on user settings page (user:settings:ldap): Allows the user to access ?LDAP? tab under user settings. When disabled, the user cannot view the 'LDAP' tab under user settings.
manage management API (user:settings:management-api): Allows users to edit management API settings. When disabled, the user cannot edit management API settings.
access plans tab on user settings page (user:settings:plan): Allows users to access the plans tab. When disabled, the users cannot access the plans tab.
see custom plan details (user:settings:plan-details): Allows users to access the custom plan details. When disabled, the users cannot access custom plan details.
access role tab on user settings page (user:settings:role): Allows users to access the role tab on user settings page. When disabled, the users cannot access the role tab on the user settings page.
access SAML tab on user settings page (user:settings:saml): Allows users to access the 'SAML' tab on the user settings page. When disabled, the users cannot access the ?SAML? tab on the user settings page.
access team tab on user settings page (user:settings:team): Allows users to access the ?team? tab on the user settings page. When disabled, the users cannot access the ?team? tab on the user settings page.
see detailed invitation settings (user:settings:team-invite-details): Allows the users to see team invitation details. When disabled, the users cannot see the team invitation details.
access usage tab on user settings page (user:settings:usage): Allows the users to access the ?usage? tab on the user settings page. When disabled, the users cannot access the ?usage? tab.

Customer

manage customer settings list (customer:settings:list): Allows users to manage the customer settings list. When disabled, the users cannot manage the customer settings list.
account administrator (account:admin): Allows users to create customer account admin. When disabled, the users cannot create a customer account admin.
manage default date format (customer:settings:default-date-format): Allows users to manage the default date format. When disabled, the users cannot manage the default date format.
manage default timezone (customer:settings:default-timezone): Allows users to manage the default timezone. When disabled, the users cannot manage the default timezone.
manage global header & footer (customer:settings:global-header-footer): Allows users to manage the global header and footer. When disabled, the users cannot manage the global header and footer.
move assets from one user to another under the same customer (customer:settings:move-user-assets): Allows users to manage the default date format. When disabled, the users cannot manage the default date format.
manage natural language processing (customer:settings:nlp): Allows users to manage NLP settings. When disabled, the users cannot manage the NLP settings.
manage password expiration (customer:settings:password-expiry): Allows users to manage the password expiration. When disabled, the users cannot manage the password expiration.
manage SSO token (customer:settings:sso-token-generate): Allows users to manage the SSO token. When disabled, the users cannot manage the SSO tokens.
Allows to manage tunnel key (customer:settings:tunnel): Allows users to manage the tunnel key. When disabled, the users cannot manage the tunnel key.

Report

attach dashboards to reports (report:dashboards): Allows users to attach dashboard PDF or embed an image of a dashboard to reports. When disabled, the users cannot attach dashboards to reports. (Defaults on for Admins and Users).
attach dataset to reports (report:datasets): Allows users to attach datasets (CSV) to reports. When disabled, the users cannot attach datasets to reports. (Defaults on for Admins and Users).
manage reports (report:email): Allows users to create and edit reports. When disabled, the users cannot create/edit reports. (Defaults on for Admins and Users).
report on instantsights (report:insights): Allows users to create reports on widget's instantsights. When disabled, the users cannot create reports on instantsights. (Defaults on for Admins and Users).
report as another user (report:report-as): Allows users to report as another user when scheduling and sending a report. (Defaults on for Admins only). When disabled, the users cannot report as another user.
attach widgets to reports (report:widgets): Allows users to attach widgets (PDF/CSV) to reports. When disabled, the users cannot attach widgets to reports. (Defaults on for Admins and Users).
send reports via email (report:send-via-email): Allows users to send reports via email. When disabled, the users cannot send reports via email. (Defaults on for Admins and Users).
send reports via slack (report:send-via-slack): Allows users to send reports via slack. When disabled, the users cannot send reports via slack. (Defaults on for Admins and Users).
send reports via teams (report:send-via-teams): Allows users to send reports via teams. When disabled, the users cannot send reports via teams. (Defaults on for Admins and Users).
send reports via webhook (report:send-via-webhook): Allows users to send reports via webhook. When disabled, the users cannot send reports via webhook. (Defaults on for Admins and Users).

Category

create a category (category:create): Allows the users to create a category. When disabled, the users cannot create a category.
delete a category (category:delete): Allows the users to delete a category. When disabled, the users cannot delete a category.
edit a category (category:edit): Allows users to edit a category. When disabled, the users cannot edit a category.
see list of categories (category:list): Allows users to see a category list. When disabled, the users cannot see the list of categories.
share a category (category:share): Allows users to share a category. When disabled, the users cannot share categories.

Other

see list of ML models (ai:mi): Allows users to see a list of ML models. When disabled, the users cannot see the list of ML models.
allows to set session timeout in minutes (customer:settings:session-timeout): Allows users to set session timeout. When disabled, the users cannot set the session timeout.
create a filter-set (filter-set:create): Allows users to create a filter set. When disabled, the users cannot create a filter set.
delete a filter-set (filter-set:delete): Allows users to delete a filter set. When disabled, the users cannot delete a filter set.
list filter-sets (filter-set:read): Allows users to list a filter set. When disabled, the users cannot list a filter set.
edit a filter-set (filter-set:update): Allows users to edit a filter set. When disabled, the users cannot edit a filter set.
manage agents (ops:agent): Allows users to manage agents. When disabled, the users cannot manage agents.
manage operational dashboards (ops:dashboard): Allows users to manage operational dashboards. When disabled, the users cannot manage operational dashboards.
manage alerts (report:alert): Allows users to manage alerts. When disabled, the users cannot manage alerts.

Document AI

query the AI for information regarding documents (document-ai:ask): Allows users to ask questions of the document AI model. When disabled, users cannot use the model.
remove documents from the AI (document-ai:delete): Allows users to delete documents. When disabled, the users cannot delete documents.
share documents with others (document-ai:share): Allows users to share documents with other users. When disabled, the users cannot share documents.
upload documents to the AI (document-ai:upload): Allows users to upload documents to document AI. When disabled, the users cannot upload new documents.

User Groups

User groups are logical groupings of users that data related assets (dashboards, queries, datasources, agents) can be shared to. A user can belong to one or more groups.

Groups can be created and modified from the Team Management menu. Example:

Adding Users

Users can be added to an existing team to share assets and collaborate seamlessly across users. To add users, go to the Teams page within User Settings:

On the team's page, you can specify the user properties such as email address, roles and permissions, and any user-level specific attributes.

Specify the email address, Role and associated Groups to the new user.
Add any optional user filters. User filters enable row level security to filter out data. Read more about User Level Filters.
If Two factor authentication is required, you can set it during the invite (or you can enable it later).
Invite the user. Once the user has accepted the invite, they'll see all their data assets (dashboards, datasources, queries, agents) shared to them or their group.

For further information on User Access & Permissions, please click here.

Users List and Pending User Invitations

The added users and the pending users are visible in these lists. On the Users list, you can view the list of users on your team along with their details, such as role, filters, group, last login date, etc.

Filtering Users

The Quick Search is a global search that searches across all columns based on the entered search term. Users can also search at individual column levels like Search Username, Search Roles, etc, to filter users based on the search term entered in a column.

The Pending User List is a list of users who have not yet accepted your invite. The email address and invite date information are displayed in this list. You can also do a global search to filter invitees based on email address or date.

Editing Users

Each user can customize their timezone and change passwords.

Admin users have more privileges like editing user roles, groups, timezones, user filters, and more for any other user. Admins can:

Edit user name
Edit user Timezone
Enable 2FA, verifying the user's identity by sending a unique code to their cell phone.
Edit user roles. To know the various user roles at Knowi, click here.
Edit user groups and share permissions for other users. There are two permissions you can grant: View or Edit. Set to view if you want the user NOT to be able to share assets (dashboards, queries, datasources, etc.) to the selected group, but can only consume assets shared to this group by other users. Set to edit to allow them to share assets with the selected group. For example, "User Puja has edit access to the default group".
Limit sharing to the selected groups. When checked, the user will only see other users within the same groups to be able to share assets and not others. For example, User Puja can see users only from the default group.
Edit the default dashboard. The default dashboard is to be shown whenever the user logs in.
Edit Always share to: Automatically share all assets created by the user to the selected groups. This is useful within a team setting to collaborate on assets created by one user to be shared with others automatically, without sharing individual assets explicitly. Shared assets include any datasources, queries, widgets, and dashboards.
Apply/Edit filters.

Password Requirements

Knowi provides admins with additional control over password requirements for users on their instance.

To manage password requirements, select User Settings from the Settings panel. Changing the Password Expiry field to a number of days other than zero (0), prompts the user to reset their password.

Create a strong password for your Knowi account

Whether you're creating a password for the first time or resetting your password, Knowi will evaluate the strength of your password to make sure that it is secure and not easily guessed.

Passwords must be at least 8 characters long, and we don't restrict the use of numbers or special characters. As you create a new password, the system will provide feedback on password strength.

If you're having trouble coming up with a password that meets our requirements, use a long, random, and unique string of characters. You can use a passphrase, but it shouldn't be a common phrase from a book, movie, TV show, etc. as those are commonly used.

To choose and store a secure password, use a secure password manager like LastPass or 1Password to generate and auto-fill unique passwords for each site you visit, including Knowi.

Help, I've been locked out of my account!

If you fail five password attempts, your account will be locked. To unlock your account, reset your password or reach out to Knowi to assist you with resetting your password.

Login as (For Admin Users)

This option allows Admin users to login into the application on behalf of any foreign user account that they have access to on the administration page. There is a number of restrictions that come along with that feature.

1. user must be authenticated 
2. user must possess a role of ADMIN
3. user can use the feature only providing active customer account
4. user can NOT use the feature on behalf of a foreign account (in a chain)

The 'Login as this user' icon is supposed to be visible on the right hand action bar of the user list.

As soon as authentication is passed the informational banner is attached to the top of the page including basic information of the user account selected.

At any point in time you can release the user account and get back the the original one by clicking on the 'Release user' button, in such a way you will be redirected back to the user administration page.

Two Factor Authentication (2FA)

For added security layer, admin can enable Two-factor Authentication, which will send a unique verification code via SMS or email whenever the user will login into Knowi.

SMS Verification

Upon enabling SMS verification, a one-time code will be sent to the provided phone number whenever the user will attempt a login.

Email Verification

Upon enabling email verification, a one-time code will be sent to the provided email address whenever the user will attempt a login.

Permissions

All data assets (dashboards, queries, datasources, agents) are private to the user by default, unless shared to other users or groups. Furthermore, each asset can be configured for granular read or edit access at a group or an individual user level.

Dashboard Sharing

Dashboards can be shared to an specific user, or a group. In addition, you can specify if the user has View access or Edit. View access restricts the user to a view mode where they can consume the dashboard, analyze the data, apply temporary filters (for their session), download the data behind the visualizations but cannot make any changes to the dashboard.

Datasource Sharing

A datasource, for example, a database connection can be shared to another user or group, with edit or consumption rights. With Edit, the user (or the group) will have access to modify the datasource (not common). With consumption only rights, the user can create new queries from the datasource, but will not be able to see or edit, or clone the datasource details.

You can add a query against source.

Setting permissions :

Consume vs Edit: The first datasource in the following screenshot is consume only (note the actions that can be performed on the right) vs. full edit privileges on the other datasource.

Query Sharing

Queries can be shared with Edit or View only rights to groups and/or users. Edit rights enable collaboration on the same query by multiple users and includes edit, clone and delete rights for that query. A query shared with view only rights can be executed and cloned to create a user's own version of the query.

Enabling:

Consume vs. Edit rights: The first query in the screenshot below is consume only, the second has edit rights.

User Group Publish/Consume Permissions

A user can belong to one or more groups, and marked with either consumption or publish rights for the specific group. In consumption mode, the user has read access to assets shared, but cannot publish into the same group. This allows publishing of assets from one user into a group, but does not allow the consumer to publish it back into the parent group.

Example: Let's say an "engineering" group writes and publishes baseline queries to an analyst and wants to maintain the original queries and does not want that user to publish queries back to the engineering group. This can be done by setting the rights during the user invite. The analyst can publish it to their own groups, but cannot post back to the parent group.

Assigning user-group consume/edit rights:

Automatic Sharing

There may be cases when any asset that the user creates needs be automatically shared to other groups, instead of sharing a specific asset explicitly (query etc.). In such cases, you can apply an 'Automatic Share to Group' setting that will automatically publish any assets created by the user to those groups that can be used by other users. This is available during user creation as well as within the edit menu.

User Level Filters & Security

User filters can be set that limits the data returned to the user across all their dashboards. There are two modes:

Query Parameters: Helps you define query parameters that can be passed in all the way into direct queries against your datasource. These parameters can be set at the user level and replaced during query execution.

Filter on Query Results: This post processes the data returned any any query to filter by the parameters set.

For an in-depth look at content filters, see section on Filters & Query Parameters.

External Authentication using LDAP

Overview

You can set up a connection with an LDAP server to allow your users to login to knowi using LDAP credentials. Please Contact us to enable this feature. The LDAP server used only as read-only information to login and get information about logged-in user objects to map directly to Knowi fields contained within their user account.

LDAP configuration

Knowi supports transport/encryption via LDAP in the clear and LDAP over TLS. LDAP over TLS is strongly recommended. The LDAP tab can be found within User settings.

It is possible to create multiple different LDAP configurations. Click "Add" to add a new configuration. If you wish to edit an existing configuration, please select it from the drop-down list. After selecting the configuration, you can then edit or view the existing configuration or delete it by pressing the "Delete" button.

LDAP Configuration details

Connection

Type an configuration name (any), your LDAP server host and port, and select TLS checkbox if your LDAP server supports TLS encryption.

Lookup Authorization

This section used to enter an "master" LDAP account which have access to get info about LDAP user objects which you or users want to login with. After entering credentials you can click small "Test" button to check if credentials and Connection details valid. This will run connection with LDAP server, "bind" with entered master DN and then unbind and disconnect from server.

User mappings

Fill fields to search user through LDAP:

Base search DN: this is the top root path to start the search of the user.

Login attributes: list comma-separated attribute names of user objects which will be used as login field to login into Knowi. E.g. this could be "uid", "cn" and etc. System will choose first match via any of the provided attributes (OR filter will be used to search users with this attributes).

Email attribute: this field will be used to read email attribute and assign to email field of Knowi User.

User Name Attributes: this field is list of attributes to set to Knowi User Name, commonly this is First Name and User Name.

ID attribute: important field as this should uniquely identify your user in LDAP server.

Filter (optional): this is optional filter field used to filter search through user objects for login. E.g. can filter by groups, organizations and etc. Please refer LDAP server documentation on filter syntax.

Roles and Groups management

Please choose which Knowi role will be mapped to the LDAP user when logging into Knowi. Optionally, you may select Default Groups which will then be sent to the user. If you change any of these settings, it will be applied to LDAP users upon their next login into Knowi.

After saving the newly created LDAP configuration, you will get LDAP login URL. This is the URL that your LDAP users should then use to login to Knowi.

LDAP login test

At the bottom of the LDAP configuration, you will find a "Test login" button. Selecting this will present a login dialog box. Enter the login attribute values to login with an LDAP account and press Test. This will mimic all login sequences by searching for the user via the set attributes and binding it if possible. If the password is not entered (it is optional), the user will be just found using a master LDAP account and not bound with a password.

This section useful if you wish to test if all LDAP configuration fields valid. After pressing the Test button you will see log output showing the exact steps made by the system to connect to LDAP.

Login with LDAP

First, you will need to provide the LDAP login link to your users. This link is obtained above. This link is associated with your customer account and your exact LDAP configuration. When the user uses this link, they will be presented with special login window. In the "ID" field user should enter a login attribute value (corresponding to login attribute in your LDAP server). In the password field, the user should type their user LDAP password. After login the user will be granted access to Knowi.

If this is a first-time user with such an ID (the ID is set up in the LDAP configuration page) then this user will be automatically created as a new user in Knowi. If this is an existing user login, then they will be directed to their Knowi user account. In this case, all changed fields, roles, and groups will be updated from the LDAP server into the Knowi user account. E.g. if user name in the LDAP server was changed, this will be updated in Knowi upon login.

External Authentication using SAML

SAML-based single sign-on (SSO) gives members of your organization access to Knowi through an identity provider (IdP) of your choice.

To use SAML, you must have a cloud identity provider (IDP) or federation service in place that supports authentication via SAML 2.0. For more information about SAML 2.0, see http://en.m.wikipedia.org/wiki/SAML_2.0

You must have an "Admin" default security role or a custom role with "user:settings:saml" enabled to set up SAML. For more information about default roles and custom roles, see User Roles.

Getting Started

SAML authentication needs to first be enabled by Knowi. To update your license for this feature, contact your account manager or open a support request in Knowi's Help Center by clicking Contact Us.

Once your license is updated, navigate to the SAML tab in the Settings section of Knowi, then click the Add button to see the following configuration options. Note that any changes to configuration options do not take effect until you click the Save button at the bottom of the page.

SAML Auth Settings

Knowi requires the IdP URL, IdP Issuer, and IdP Certificate to authenticate your IdP.

Note: Dynamic configuration with IdP Metadata is not supported at this time.

IdP URL: The URL where Knowi will go to authenticate users.

IdP Issuer: The unique identifier of the IdP.

IdP Certificate: The public key to let Knowi verify the signature of IdP responses.

Additional SAML attributes supported by Knowi

contentFilter: The contentFilter attribute lets you set content filters for your users. Like all other attributes, it can be on groups or directly on a user within your IDP and they stack up like the 'group' attribute. Please note that it might be necessary to enable attribute aggregation on your IDP for stackable attributes. If no contentFilter attribute is present, content filters for that user will be unset, meaning the user has access to the full data.

dashboardUrl: sets the dashboard that a user sees after logging in. You can either paste the entire URL or just the dashboard ID part from a URL, both should work. If this attribute is not present, the most recently opened dashboard will be displayed for return logins and the playground will be launched for new users.

role: sets the user role, only one role per user is supported at this time. If no role is provided from an attribute, the default role from the SAML configuration will be used.

groups: The groups that the user will be part of in Knowi. Users can be put into multiple groups in Knowi by adding more than one 'group' attribute. If no groups attribute is present, the default groups from your SAML config will be used.

logoutUrl: this attribute, a full URL, for example, https://www.knowi.com will cause the user to be redirected to that URL upon logout. If this attribute is not set, the knowi home page will be opened upon logout.

Default Groups and Roles

You can set a default role and groups for new SAML users. In the User Roles and Groups section, enter the names of any Knowi roles or groups to which you want to assign new Knowi users when they first log in to Knowi.

These groups and roles are applied to new users at their initial login. The groups and roles are not applied to pre-existing users, and they are not reapplied if they are removed from users after the users' initial login.

User Attributes Setting

In the following fields, specify the attribute name in your IdP's SAML configuration that contains the corresponding information for each field. The SAML attribute names tells Knowi how to map those fields and extract their information at login time. Knowi isn't particular about how this information is constructed, it's just important that the way you input it into Knowi matches the way that the attributes are defined in your IdP.

NAME	VALUE
userId	user.id
userEmail	user.email
userLogin	user.login

Signing out of Knowi when using Single Sign-On

To completely sign out, you must sign out of Knowi and close the browser.

Click the Logout button on the bottom-left menu of the navigation bar
Close the Web browser

Using Knowi with Single Sign-On

When using Knowi with Single Sign-On, you cannot

be sent a forgotten password email
change your password in your profile

FAQ

Q: Can I use an alternate login with SAML?

Knowi email/password logins are available for Admin users. This option is useful as a fallback during SAML Auth setup should SAML config problems occur later, or if you need to support some users who do not have accounts in your SAML directory.

Q: Can I merge an existing Knowi user to SAML or vice versa?

You can merge or transfer a user between authentication types (Knowi email/password, LDAP, SAML, SSO). This can be done using the Management API or from the UI.

How to self-configure SAML SSO with Okta

Knowi uses single sign-on (SSO) for Enterprise users to simplify the sign-in process and allow access to Knowi using several authentication sources, including Okta. Your Workspace must be subscribed to the Enterprise plan if you wish to set up SSO.

If you're the Admin of your company's Enterprise account, you can configure SSO using the following steps:

Go to your SAML tab by clicking on Settings in the left navigation bar then User settings. Click on SAML then Add. Keep this tab open, as you'll be returning to your Knowi Workspace later.
Open up your Okta admin portal and set up a new application using the Applications tab. Select SAML 2.0 as your sign-on method. Configure your new integration by naming it Knowi and adding a logo if you want.
You'll now see Knowi's SAML Settings. Start with the General section below. You'll need to grab some information from Knowi and input it into Okta:
- Paste the SSO URL from Knowi into the Single sign on URL field on Okta.
- Paste the Audience URI from Knowi into the Audience URI (SP Entity ID) field on Okta.
- For Name ID format, choose Unspecified.
- For Application username, choose Okta username.
Scroll down to Attribute Statements in Okta. You'll need to map your fields:
- For userId, map to the value within your organization's Okta setup.
- For userEmail, map to the value within your organization in Okta. Note: It's important to follow the same capitalization format in your organization when you add this name.
- For userLogin, map to your organization's Okta value as well. Capitalization matters here, too.
Knowi doesn't yet support group attribute statements, so you can leave that portion blank.
Hit next and fill out the final Okta form according to your own preferences. This won't impact anything in your Knowi Workspace.
Your application is ready! You'll now need to take some information from Okta and bring it back to your Knowi portal. Start by clicking View Setup Instructions in your Sign-on Methods settings.
- Paste your IdP SSO URL under Identity Provider Single Sign-ON URL in your Knowi SAML settings where it says IdP URL.
- Paste your IdP Issuer under Identity Provider Issuer in your Knowi SAML settings where it says IdP Issuer.
- Copy and paste your X.509 Certificate from your setup instructions in Okta to your Knowi SAML settings.
You can Test configuration and Save the Knowi SAML settings

Additional SAML attributes supported by Knowi

contentFilter: The contentFilter attribute lets you set content filters for your users. Like all other attributes, it can be on groups or directly on a user within your IDP and they stack up like the 'group' attribute. Please note that it might be necessary to enable attribute aggregation on your IDP for stackable attributes. If no contentFilter attribute is present, content filters for that user will be unset, meaning the user has access to the full data.
dashboardUrl: sets the dashboard that a user sees after logging in. You can either paste the entire URL or just the dashboard ID part from a URL, both should work. If this attribute is not present, the most recently opened dashboard will be displayed for return logins and the playground will be launched for new users.
role: sets the user role, only one role per user is supported at this time. If no role is provided from an attribute, the default role from the SAML configuration will be used.
groups: The groups that the user will be part of in Knowi. Users can be put into multiple groups in Knowi by adding more than one 'group' attribute. If no groups attribute is present, the default groups from your SAML config will be used.
logoutUrl: this attribute, a full URL, for example, https://www.knowi.com will cause the user to be redirected to that URL upon logout. If this attribute is not set, the knowi home page will be opened upon logout.