セキュリティとアクセス

Access Blocks ExplainedFour related but distinct ways to control who can reach your organization, all on one Settings screen: IP Whitelist — always allowed, and always wins if the same address is also blacklisted. IP Blacklist — permanently…

Detection Rules ExplainedA detection rule watches for a pattern of events — a Threshold Count of matching events within a Window of minutes — and automatically fires one or more Response Actions when that pattern is hit: log it only,…

The PHI Access AuditEvery read of protected health information anywhere in KamoCRM is recorded as a PHI access record: who (actor), what kind of access (view, list, search, download, export, or disclose), on what record (one of 17 tracked…

What Turning On PHI Handling DoesThe PHI compliance boundary is a tenant-wide switch: turn it on when an organization handles protected health information and Kamo acts as its business associate under HIPAA. While it's on, the platform refuses every…

How to Configure Detection RulesNote: there's no visible "New Rule" button in the current UI — only editing, enabling/disabling, and deleting an existing rule. The create path exists in the underlying code but nothing in the interface reaches it.…

How to Manage Access Blocks and Geo-BlockingControl which IPs and countries can reach your organization — four related lists on one screen. Before you start The Manage Access Rules right. Steps Go to Settings → System Security → Access Blocks. There are four…

How to Manage Public API KeysScope note: despite the card's description ("control programmatic access to your organization's data"), this doesn't manage general CRM data API access. It manages keys for exactly five named integrations: Public Chat,…

How to Review the PHI Access TrailSee every read of protected health information in your organization — for periodic review, or to answer someone asking who has accessed their record. Before you start The View Access Logs right to view; the separate…

How to Turn PHI Handling On or OffAudience correction: unlike everything else in this Security section, this is not something any organization admin — including a full Administrator role — can reach or perform. The tab itself is only visible to platform…

How to Review System Access LogsNote: the Settings landing page card for this used to be called "Suspicious Behavior" — that name and its old URL slug (?tab=suspicious-behavior) are stale leftovers from a rename; the real, current tab is "System…

このセクションで

アカウント、アプリ、コミッション

AI設定

必須のセットアップ

ネットワーク・組織