Guest access
Let a client into one project without letting them see the rest of your workspace.
A guest is an organization role for people outside your company — a client, a contractor, an external reviewer.
The rule
A guest sees exactly the projects they have been added to. There is no other path.
Not "projects marked public plus the ones they were added to". Not "everything in the workspace except private projects". Only what you explicitly gave them.
That includes everything derived from projects: the project list, search, the user directory, reports, and the member roster. A guest cannot enumerate your workspace, cannot see who else is in it, and cannot find a task by guessing its key.
Guest safety deliberately does not depend on someone having remembered to mark a project private. If it did, one forgotten setting would be a client seeing another client's work.
Inviting a guest
Invite them at the workspace level
Settings → Members → Invite, and choose the Guest role. At this point they can see nothing.
Add them to a project
Project → Members → Add. Give them a project role — normally Viewer (read-only) or Reporter (can create and comment, cannot change others' work).
The second step is what actually grants access, and it is per project. Adding a guest to a second project is a separate, deliberate action.
Internal comments
Comments can be marked internal. An internal comment is invisible to guests on a task they can otherwise see in full.
Use it for the conversation you would have had in a private channel — pricing, scheduling, the honest assessment. It stays with the work instead of living somewhere nobody will find it in six months.
Converting a guest
A guest promoted to Member gains the normal workspace visibility of their role. A member demoted to Guest immediately loses everything except their explicit project memberships. Both take effect at once.
Checking what a guest can see
The reliable way is the member's own project list under Settings → Members. It shows exactly the projects that grant them access — which is the complete answer, because there is no second path for it to miss.