PlatformControl & audit
Who sees what, who approves what, and a record of both.
Seven built-in roles and your own, teams, sharing rules and field access. Approval rules hold an act until the right people approve it. The audit log records who did what and from where, including what was refused.
Access, approvals and the log.
Roles
Owner, Admin, Billing Admin, Manager, Member and Viewer, and roles you build: for each object, who may view, edit, delete and communicate, over all records, their team's or their own.
Teams and sharing
Teams in a hierarchy where a parent sees its sub-teams' records. Sharing rules grant access, restriction rules take it away, and a record can be shared by hand.
Field access
For each property, choose Edit, View, Masked or Hidden, for everyone and for each role level. Personal data starts masked for Viewers.
Approval rules
Hold a step, a new record, a change of properties or a deletion until approvers say yes, in order: a manager, a role, a team or a named person, above a threshold in a currency you set.
Audit log
Who did what, from where and when, in plain sentences, including what was refused. Filter it, search it and export it; how far back you read depends on the plan.
Personal data
Export everything the organization holds about a person as one file, or erase them, and an erased address cannot be brought back by an import or a workflow.
The Agent never grants itself more.
It works with the rights of the person it works for. Access, roles and approvals are for people: some acts always ask, and some no agent can do at all.
audit.Reads the audit log, for someone allowed to read it.Runslist approval.Lists approvals waiting and decided.Runslist sharing.Shares a record with a person, a team or a role.Always asksshare property.Sets the access a role has to a property.Always askspermissions. set role.Changes someone's role.People onlyassign approval.Approves or rejects an approval.People onlydecide approval_Saves an approval rule.People onlyrule. save
Each square is a mode, left to right: Ask every time (the default), Auto inside the organization, Auto including replies and Full autonomy. A filled square means the Agent runs the tool in that mode without asking.
The same rules everywhere.
- The AgentApproval rules hold the Agent's acts the same as anyone's, and it tells you which rule holds them and who decides.
- WorkflowsAn approval rule holds a workflow's act the same way it holds anyone's.
- Objects & dataField access applies in lists, search, exports and reports.
- HRHR is a role inside each legal entity, and the Leave rule sends requests to it.
Sign-in, and your organization kept apart.
- Every read and write is limited to your organization, which the product takes from your signed-in membership, not from anything a request says.
- Sign-in is by email and password, with eight attempts a minute per account; a password change ends every older session.
- Your membership is checked again on every request, so freezing or deactivating someone takes effect at once.
- There is no single sign-on or two-step sign-in yet.
- Nobody decides their own request, an open approval locks its record, and an approval expires after 30 days.
What shipped lately.
All changesSensitive data, on Enterprise
An admin can mark a property Keep encrypted, and its values are sealed with the organization's own key, which the organization can roll and then destroy the old version of.
Approval rules for actions that need a yes
Set which actions wait for approval and who approves them, step by step; buttons say so in advance, and what waits sits in one queue at the top of Home.
An audit log of who did what
Settings > Members & access > Audit log reads as plain sentences, with views for sign-ins, security, exports, deletions and refused actions.
Privacy export and erasure on person records
An admin can export everything the organization holds about a person as one file, or erase them, after which their addresses go on a block list so no import or workflow brings them back.
Read more.
- DocsRoles and permissionsThe seven built-in roles, the twelve rights and custom roles.
- DocsAccess and sharingAccess defaults, teams, sharing rules and field access.
- DocsApproval rulesWhat a rule can hold, who decides, and in what order.
- DocsAudit logWhat is recorded, what your plan lets you read, and export.
One platform for the whole business.
Every module works on the same records, and the Agent works on them with your permissions.