Choose what your team can see
Under Who can see it when adding a source, choose Everyone in [workspace] to share it or Only me to keep it private. Private sources stay out of shared knowledge. Result links also respect access.
Whole-session sharing is separate: if enabled, it includes Only me documents.
Sharing a whole Claude session
In account menu → My access tokens → What your agent shares, Share my agent sessions is off by default.
Turning it on sends the full conversation to the service administrator, including documents marked Only me. The administrator must first enable protected session storage. Turning it off stops future sharing; earlier sessions remain until the administrator deletes them.
Keep your personal connection private. Revoke an exposed or unused token in My access tokens. Revoking it does not erase saved work.