What can Support see?

Delivery and ops. Not secrets. Not raw bounce dumps.

Support can look up a recipient, read events, analytics, and status, and remove a suppression. Viewer can read the same pages and cannot remove.

They cannot copy SMTP passwords, webhook secrets, DKIM private keys, provision tokens, or API key plaintext. Those stay with Team Administrator.

Event pages show the classified bounce explanation. They do not show the raw payload dump. That dump can carry another tenant's diagnostic on a shared capsule. The same rule applies to a Support key: payload is omitted. Digits of four or more in a subject or body become bullets.

Network hops use public capsule names. They never show an internal node hostname.

What to tell the customer

Paste the bounce explanation. Do not paste a payload dump. If they need a secret rotated, ask a Team Administrator.

Who can do this

Viewer and Support read delivery data without secrets. Team Administrator can reveal secrets and open the raw payload.