Security & access control
Every workspace is a sealed tenant
Every query is scoped to your workspace. Data is never shared across companies, and platform staff can only access it through a request you approve.
Workspace-scoped data and file storage
Support access only by approved, time-limited request
Encryption in transit and at rest
Nile Heights Real EstateIsolated
Riverside Dental ClinicIsolated
[Your company]Isolated
Example: a support engineer requests 2 hours of read access — your admin approves, the session is logged and expires automatically.
Roles that match your org chart
Start with default roles, then create your own. Limit data by owner, team or branch, and hide sensitive fields.
Own / team / all data scopes
Field-level visibility for sensitive data
Export and delete rights controlled separately
RoleViewEditExportDelete
AgentOwnOwn——
Team leaderTeamTeamTeam—
ManagerAllAllAllApproval
AdminAllAllAllAll
Strong sign-in, controlled sessions
Require MFA for everyone or for specific roles, control session length and see every active device.
Authenticator-app MFA (TOTP)
Session timeout and remote sign-out
SSO / SAML on Enterprise
Require MFA for all usersAuthenticator app, 6-digit codeOn
Session timeoutSign out after inactivity12 hours
Allowed IP rangesRestrict sign-in to office networksOptional
Active sessionsChrome, iPhone app, Android app3 devices
A record of every sensitive action
Exports, role changes, deletions and access requests are logged with who, when and from where.
Searchable, filterable audit trail
Export the log for compliance reviews
Retention period you control [PLACEHOLDER]
10:42HossamExported 240 leads (CSV)Export
10:15AdminChanged Karim H.’s role to Team leaderRole
09:58Nour A.Signed in from a new device · MFA passedSign-in
09:30SupportAccess request — denied by AdminAccess
Sample entries · times in workspace time zone