Organization and security

Roles and permissions

Roles are owner, admin, contributor, auditor and supplier guest. Two permissions sit on top: can_sign_reports for the named signer, and an entity scope that limits a member to some entities or brands.

Team

• Invites expire. Seat limits are enforced with an upgrade path.
• Ownership can be transferred, and the last owner cannot be removed.
• Offboarding reassigns a leaver's open work. An admin audit log records the changes.

Sign-in

• Email with a password or a passkey.
• Multi-factor by authenticator app, passkey or recovery code, with an organization policy and step-up for sensitive actions.
• On Scale: SAML and OIDC single sign-on with verified domains, SCIM provisioning and a break-glass account.

Your data

Export and deletion for GDPR and CCPA, a data processing agreement, a subprocessor list and retention settings.