[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-\u002Fhe\u002Fdocs\u002Fsecurite\u002Faudit-rgpd":3,"docs-nav-he":400},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"body":10,"_type":394,"_id":395,"_source":396,"_file":397,"_stem":398,"_extension":399},"\u002Fhe\u002Fdocs\u002Fsecurite\u002Faudit-rgpd","securite",false,"","ביקורת GDPR ויומן גישה","כיצד betool מתעדת גישות cross-tenant לתוכן משתמשים ומספקת כלים לזכות הגישה (סעיף 15) ולזכות המחיקה (סעיף 17).",{"type":11,"children":12,"toc":384},"root",[13,21,28,33,111,130,136,155,164,169,174,180,193,206,212,234,257,267,273,285,291,303,308,314,333,379],{"type":14,"tag":15,"props":16,"children":17},"element","p",{},[18],{"type":19,"value":20},"text","betool מתוכננת לעמוד בדרישות GDPR ללא פתרונות עקיפין: כל גישה לתוכן משתמש על ידי סוכן השייך לארגון אחר נרשמת ביומן, וכל ארגון יכול לעיין ביומן שלו.",{"type":14,"tag":22,"props":23,"children":25},"h2",{"id":24},"יומן-הגישה",[26],{"type":19,"value":27},"יומן הגישה",{"type":14,"tag":15,"props":29,"children":30},{},[31],{"type":19,"value":32},"טבלה ייעודית מתעדת, עבור כל גישה cross-tenant:",{"type":14,"tag":34,"props":35,"children":36},"ul",{},[37,43,56,67,72,84,106],{"type":14,"tag":38,"props":39,"children":40},"li",{},[41],{"type":19,"value":42},"חותמת הזמן",{"type":14,"tag":38,"props":44,"children":45},{},[46,48,54],{"type":19,"value":47},"הארגון ",{"type":14,"tag":49,"props":50,"children":51},"strong",{},[52],{"type":19,"value":53},"היעד",{"type":19,"value":55}," (שתוכנו נקרא)",{"type":14,"tag":38,"props":57,"children":58},{},[59,60,65],{"type":19,"value":47},{"type":14,"tag":49,"props":61,"children":62},{},[63],{"type":19,"value":64},"הקורא",{"type":19,"value":66}," (בדרך כלל ה-vendor)",{"type":14,"tag":38,"props":68,"children":69},{},[70],{"type":19,"value":71},"המשתמש שהפעיל את הקריאה",{"type":14,"tag":38,"props":73,"children":74},{},[75,77,82],{"type":19,"value":76},"ה-",{"type":14,"tag":49,"props":78,"children":79},{},[80],{"type":19,"value":81},"tool",{"type":19,"value":83}," שדרכו עברה הקריאה",{"type":14,"tag":38,"props":85,"children":86},{},[87,89,96,98,104],{"type":19,"value":88},"סוג הישות (אוצר מילים סגור: ",{"type":14,"tag":90,"props":91,"children":93},"code",{"className":92},[],[94],{"type":19,"value":95},"context",{"type":19,"value":97}," עבור שיחה, ",{"type":14,"tag":90,"props":99,"children":101},{"className":100},[],[102],{"type":19,"value":103},"scenario",{"type":19,"value":105}," עבור benchmark)",{"type":14,"tag":38,"props":107,"children":108},{},[109],{"type":19,"value":110},"מזהה הישות שנקראה (וה-exchange המדויק כאשר הקריאה מכוונת לתור בודד)",{"type":14,"tag":15,"props":112,"children":113},{},[114,116,121,123,128],{"type":19,"value":115},"אוצר המילים של הישויות ",{"type":14,"tag":49,"props":117,"children":118},{},[119],{"type":19,"value":120},"סגור ברמת מסד הנתונים",{"type":19,"value":122}," (CHECK constraint) ו",{"type":14,"tag":49,"props":124,"children":125},{},[126],{"type":19,"value":127},"סגור ברמת הקוד",{"type":19,"value":129}," (whitelist אפליקטיבית). הוספת סוג = מיגרציה חדשה + עדכון whitelist. אין רשומות לא צפויות.",{"type":14,"tag":22,"props":131,"children":133},{"id":132},"זכות-הגישה-סעיף-15",[134],{"type":19,"value":135},"זכות הגישה (סעיף 15)",{"type":14,"tag":15,"props":137,"children":138},{},[139,141,146,148,153],{"type":19,"value":140},"כל ארגון יכול לעיין בלוגי הגישה שלו בלבד, ב-",{"type":14,"tag":49,"props":142,"children":143},{},[144],{"type":19,"value":145},"הגדרות הארגון → פרטיות",{"type":19,"value":147}," (מקטע ",{"type":14,"tag":49,"props":149,"children":150},{},[151],{"type":19,"value":152},"יומן גישות",{"type":19,"value":154},") או דרך:",{"type":14,"tag":156,"props":157,"children":159},"pre",{"code":158},"GET \u002Fapi\u002Fadmin\u002Fme\u002Fsupervisor-reads\n",[160],{"type":14,"tag":90,"props":161,"children":162},{"__ignoreMap":7},[163],{"type":19,"value":158},{"type":14,"tag":15,"props":165,"children":166},{},[167],{"type":19,"value":168},"הנתיב מחזיר את הקריאות בסדר כרונולוגי יורד (עד 1,000 רשומות לקריאה).",{"type":14,"tag":15,"props":170,"children":171},{},[172],{"type":19,"value":173},"אין גישה cross-org לביקורת: ה-vendor לעולם אינו רואה את לוגי הביקורת של הלקוח.",{"type":14,"tag":22,"props":175,"children":177},{"id":176},"זכות-המחיקה-סעיף-17",[178],{"type":19,"value":179},"זכות המחיקה (סעיף 17)",{"type":14,"tag":15,"props":181,"children":182},{},[183,185,191],{"type":19,"value":184},"הארכיטקטורה מאפשרת לבצע את המחיקה בצורה נקייה: כל הנתונים של ארגון משויכים ל-",{"type":14,"tag":90,"props":186,"children":188},{"className":187},[],[189],{"type":19,"value":190},"org_id",{"type":19,"value":192}," שלו (טבלאות עסקיות, תיקיות קבצים, סודות), מה שמאפשר מחיקה ממוקדת — משתמש מסוים, שיחה מסוימת, או הארגון כולו — מבלי לגעת בשאר.",{"type":14,"tag":15,"props":194,"children":195},{},[196,198,204],{"type":19,"value":197},"בקשות מחיקה (סעיף 17) מטופלות מול התמיכה שלנו: כתבו ל-",{"type":14,"tag":90,"props":199,"children":201},{"className":200},[],[202],{"type":19,"value":203},"contact@betool.fr",{"type":19,"value":205}," מחשבון מנהל של הארגון הנוגע בדבר.",{"type":14,"tag":22,"props":207,"children":209},{"id":208},"opt-in-ו-opt-out-לקריאה-cross-tenant",[210],{"type":19,"value":211},"Opt-in ו-opt-out לקריאה cross-tenant",{"type":14,"tag":15,"props":213,"children":214},{},[215,217,226,228,232],{"type":19,"value":216},"כברירת מחדל, ה-opt-in לקריאה cross-tenant הוא ",{"type":14,"tag":49,"props":218,"children":219},{},[220],{"type":14,"tag":90,"props":221,"children":223},{"className":222},[],[224],{"type":19,"value":225},"FALSE",{"type":19,"value":227},". מנהל הארגון יכול להפעילו — ולבטלו בכל עת — ב-",{"type":14,"tag":49,"props":229,"children":230},{},[231],{"type":19,"value":145},{"type":19,"value":233},".",{"type":14,"tag":34,"props":235,"children":236},{},[237,247],{"type":14,"tag":38,"props":238,"children":239},{},[240,245],{"type":14,"tag":49,"props":241,"children":242},{},[243],{"type":19,"value":244},"מושבת",{"type":19,"value":246}," — ברירת מחדל. ה-vendor אינו יכול לגשת לאף תוכן של ארגון זה. תוצאה: לא ניתן לקיים תמיכה cross-org בכל מה שנוגע לתוכן (התמיכה המבנית נשארת אפשרית).",{"type":14,"tag":38,"props":248,"children":249},{},[250,255],{"type":14,"tag":49,"props":251,"children":252},{},[253],{"type":19,"value":254},"מופעל",{"type":19,"value":256}," — המפקח יכול לקרוא את השיחות של הארגון לצורך אבחון, כאשר כל גישה מתועדת בביקורת וניתנת לעיון על ידי הארגון.",{"type":14,"tag":15,"props":258,"children":259},{},[260,265],{"type":14,"tag":49,"props":261,"children":262},{},[263],{"type":19,"value":264},"ה-vendor אינו יכול להפעיל opt-in זה עבור הלקוח.",{"type":19,"value":266}," זהו מבחן יסודי: אם ה-vendor יכול לעשות toggle ללא פעולת לקוח — הארכיטקטורה שבורה.",{"type":14,"tag":22,"props":268,"children":270},{"id":269},"מעקה-בטיחות-לפעולות-הרסניות",[271],{"type":19,"value":272},"מעקה בטיחות לפעולות הרסניות",{"type":14,"tag":15,"props":274,"children":275},{},[276,278,283],{"type":19,"value":277},"כל פעולה שמשמידה או מחליפה תוכן (DELETE, REPLACE-IN-PLACE) ",{"type":14,"tag":49,"props":279,"children":280},{},[281],{"type":19,"value":282},"נדחית בשלב הוולידציה",{"type":19,"value":284}," אם הארגון היעד לא הפעיל את ה-opt-in לקריאה. הסיבה: ללא נראות, המפעיל מציע בעיוורון payload שעלול לדרוס את הקיים.",{"type":14,"tag":22,"props":286,"children":288},{"id":287},"סירוב-מדורג-אם-הביקורת-אינה-זמינה",[289],{"type":19,"value":290},"סירוב מדורג אם הביקורת אינה זמינה",{"type":14,"tag":15,"props":292,"children":293},{},[294,296,301],{"type":19,"value":295},"אם מסד נתוני הביקורת אינו זמין (אירוע תשתיתי), כל קריאה cross-tenant ",{"type":14,"tag":49,"props":297,"children":298},{},[299],{"type":19,"value":300},"נדחית",{"type":19,"value":302},". מדיניות מחמירה: אין קריאה ללא עקבה.",{"type":14,"tag":15,"props":304,"children":305},{},[306],{"type":19,"value":307},"תוצאה בצד הקוד: caller שתופס חריגה חייב לזרוק מחדש את שגיאת הביקורת לפני כל טיפול עסקי. זהו אינווריאנט הנבדק על ידי benchmark האבטחה.",{"type":14,"tag":22,"props":309,"children":311},{"id":310},"עוגיות-הסכמה",[312],{"type":19,"value":313},"עוגיות הסכמה",{"type":14,"tag":15,"props":315,"children":316},{},[317,319,324,326,331],{"type":19,"value":318},"האתר השיווקי (betool.ai) מודד את הקהל שלו באמצעות ",{"type":14,"tag":49,"props":320,"children":321},{},[322],{"type":19,"value":323},"Google Analytics 4",{"type":19,"value":325},", ב-",{"type":14,"tag":49,"props":327,"children":328},{},[329],{"type":19,"value":330},"Consent Mode v2",{"type":19,"value":332},":",{"type":14,"tag":34,"props":334,"children":335},{},[336,355,367],{"type":14,"tag":38,"props":337,"children":338},{},[339,341,346,348,353],{"type":19,"value":340},"כברירת מחדל, כל ההסכמות של Google (מדידה, פרסום) מוגדרות כ",{"type":14,"tag":49,"props":342,"children":343},{},[344],{"type":19,"value":345},"נדחו",{"type":19,"value":347},": הסקריפט של Google Analytics ",{"type":14,"tag":49,"props":349,"children":350},{},[351],{"type":19,"value":352},"אינו נטען",{"type":19,"value":354}," ולא מוצבת שום עוגייה אנליטית.",{"type":14,"tag":38,"props":356,"children":357},{},[358,360,365],{"type":19,"value":359},"הסקריפט נטען, והמדידה מופעלת, ",{"type":14,"tag":49,"props":361,"children":362},{},[363],{"type":19,"value":364},"רק לאחר הסכמתכם המפורשת",{"type":19,"value":366}," למדידת הקהל בבאנר.",{"type":14,"tag":38,"props":368,"children":369},{},[370,372,377],{"type":19,"value":371},"ניתן לבטל הסכמה זו בכל עת (",{"type":14,"tag":49,"props":373,"children":374},{},[375],{"type":19,"value":376},"ניהול עוגיות",{"type":19,"value":378},", בתחתית העמוד): המדידה חוזרת אז למצב נדחה.",{"type":14,"tag":15,"props":380,"children":381},{},[382],{"type":19,"value":383},"הסכמות הפרסום נשארות דחויות: האתר אינו מבצע טירגוט פרסומי.",{"title":7,"searchDepth":385,"depth":385,"links":386},2,[387,388,389,390,391,392,393],{"id":24,"depth":385,"text":27},{"id":132,"depth":385,"text":135},{"id":176,"depth":385,"text":179},{"id":208,"depth":385,"text":211},{"id":269,"depth":385,"text":272},{"id":287,"depth":385,"text":290},{"id":310,"depth":385,"text":313},"markdown","content:he:docs:5.securite:3.audit-rgpd.md","content","he\u002Fdocs\u002F5.securite\u002F3.audit-rgpd.md","he\u002Fdocs\u002F5.securite\u002F3.audit-rgpd","md",[401],{"title":402,"_path":403,"children":404},"He","\u002Fhe",[405],{"title":406,"_path":407,"children":408},"Docs","\u002Fhe\u002Fdocs",[409,422,450,478,491,505,518,579],{"title":410,"_path":411,"children":412},"תחילת העבודה","\u002Fhe\u002Fdocs\u002Fdemarrer",[413,416,419],{"title":414,"_path":415},"ברוכים הבאים","\u002Fhe\u002Fdocs\u002Fdemarrer\u002Fbienvenue",{"title":417,"_path":418},"יצירת חשבון","\u002Fhe\u002Fdocs\u002Fdemarrer\u002Fcreer-un-compte",{"title":420,"_path":421},"חיבור מפתח LLM","\u002Fhe\u002Fdocs\u002Fdemarrer\u002Fbrancher-llm",{"title":423,"_path":424,"children":425},"ערוצים","\u002Fhe\u002Fdocs\u002Fcanaux",[426,429,432,435,438,441,444,447],{"title":427,"_path":428},"סקירת הערוצים","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fvue-densemble",{"title":430,"_path":431},"טלפוניה בזמן אמת","\u002Fhe\u002Fdocs\u002Fcanaux\u002Ftelephone",{"title":433,"_path":434},"אימייל","\u002Fhe\u002Fdocs\u002Fcanaux\u002Femail",{"title":436,"_path":437},"Chat widget לאתר","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fchat-widget",{"title":439,"_path":440},"Webhook HTTP","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fwebhook",{"title":442,"_path":443},"מסרים מיידיים (WhatsApp, Messenger, Telegram, Mattermost)","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fmessageries",{"title":445,"_path":446},"Meta Lead Ads","\u002Fhe\u002Fdocs\u002Fcanaux\u002Ffacebook-leads",{"title":448,"_path":449},"תזמון (cron)","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fschedule",{"title":451,"_path":452,"children":453},"פייפליינים","\u002Fhe\u002Fdocs\u002Fpipelines",[454,457,460,463,466,469,472,475],{"title":455,"_path":456},"העורך הויזואלי","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fediteur-visuel",{"title":458,"_path":459},"סוכני AI","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fagents",{"title":461,"_path":462},"אופרטורים דטרמיניסטיים","\u002Fhe\u002Fdocs\u002Fpipelines\u002Foperateurs",{"title":464,"_path":465},"בקרת זרימה","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fcontrole-flux",{"title":467,"_path":468},"שלבי קוד","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fcode-step",{"title":470,"_path":471},"תת-פייפליינים","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fsous-pipelines",{"title":473,"_path":474},"פעולות ללא קוד","\u002Fhe\u002Fdocs\u002Fpipelines\u002Factions-no-code",{"title":476,"_path":477},"בסיס ידע","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fbase-de-connaissances",{"title":479,"_path":480,"children":481},"פיקוח","\u002Fhe\u002Fdocs\u002Fsupervision",[482,485,488],{"title":483,"_path":484},"היסטוריית ביצועים","\u002Fhe\u002Fdocs\u002Fsupervision\u002Fexecutions",{"title":486,"_path":487},"קרדיטים ומדידת צריכה","\u002Fhe\u002Fdocs\u002Fsupervision\u002Fcredits-metering",{"title":489,"_path":490},"Benchmarks","\u002Fhe\u002Fdocs\u002Fsupervision\u002Fbenchmarks",{"title":492,"_path":493,"children":494},"אבטחה","\u002Fhe\u002Fdocs\u002Fsecurite",[495,498,501,502],{"title":496,"_path":497},"עקרונות אבטחה","\u002Fhe\u002Fdocs\u002Fsecurite\u002Fprincipes",{"title":499,"_path":500},"מולטי-טננט קפדני","\u002Fhe\u002Fdocs\u002Fsecurite\u002Fmulti-tenant",{"title":8,"_path":4},{"title":503,"_path":504},"פריסה ריבונית","\u002Fhe\u002Fdocs\u002Fsecurite\u002Fdeploiement-souverain",{"title":506,"_path":507,"children":508},"מפתחים","\u002Fhe\u002Fdocs\u002Fdeveloppeurs",[509,512,515],{"title":510,"_path":511},"API admin","\u002Fhe\u002Fdocs\u002Fdeveloppeurs\u002Fapi-admin",{"title":513,"_path":514},"Webhooks יוצאים","\u002Fhe\u002Fdocs\u002Fdeveloppeurs\u002Fwebhooks-sortants",{"title":516,"_path":517},"שליטה ב-betool מתוך Claude (MCP)","\u002Fhe\u002Fdocs\u002Fdeveloppeurs\u002Fmcp",{"title":519,"_path":520,"children":521},"אינטגרציות","\u002Fhe\u002Fdocs\u002Fintegrations",[522,525,528,531,534,537,540,543,546,549,552,555,558,561,564,567,570,573,576],{"title":523,"_path":524},"סקירת האינטגרציות","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fvue-densemble",{"title":526,"_path":527},"Stripe","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fstripe",{"title":529,"_path":530},"GitHub","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fgithub",{"title":532,"_path":533},"Google","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fgoogle",{"title":535,"_path":536},"LinkedIn Ads","\u002Fhe\u002Fdocs\u002Fintegrations\u002Flinkedin-ads",{"title":538,"_path":539},"Kavkom","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fkavkom",{"title":541,"_path":542},"Jira","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fjira",{"title":544,"_path":545},"Slack","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fslack",{"title":547,"_path":548},"SMS","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fsms",{"title":550,"_path":551},"Enable Banking (open banking)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fenable-banking",{"title":553,"_path":554},"CRM, שיווק ופרודוקטיביות","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fcrm-marketing",{"title":556,"_path":557},"HeyGen (וידאו)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fheygen",{"title":559,"_path":560},"La Poste","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fla-poste",{"title":562,"_path":563},"CRM עסקי (beTool Application, Qhare)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fcrm-metier",{"title":565,"_path":566},"Mitti (בדיקות שטח)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fmitti",{"title":568,"_path":569},"Meta (Messenger, Pages, Meta Ads)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fmeta",{"title":571,"_path":572},"Onoff Business (Beta)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fonoff",{"title":574,"_path":575},"Smart Life \u002F Tuya (מכשירים מחוברים)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fsmart-life",{"title":577,"_path":578},"מוצרי beTool (Desktop, Kiosk, Terminal)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fproduits-betool",{"title":580,"_path":581,"children":582},"תרחישי שימוש","\u002Fhe\u002Fdocs\u002Fcas-usage",[583,586,589,592,595,598],{"title":584,"_path":585},"סוכנים עסקיים לדוגמה","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fvue-densemble",{"title":587,"_path":588},"CFO IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fcfo-ia",{"title":590,"_path":591},"COO IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fcoo-ia",{"title":593,"_path":594},"CTO IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fcto-ia",{"title":596,"_path":597},"Product Manager IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fproduct-manager-ia",{"title":599,"_path":600},"עוזר אישי","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fassistant-personnel"]