Security
Security built in
Your quality documents and records stay on your server, behind controls that pass an ISO/IEC 27001 audit.
Login and data protection
- Two-step login with an authenticator app or e-mail code
- Backup codes for lost phones
- Login with company e-mail only, restricted to your domain
- One active session per user, with an active sessions list
- AES-256 encryption for vault and licence secrets
- TLS 1.2 or newer for all traffic
- Every view of a vault entry is logged
Control who does what
Access per application
Decide who uses each application, for which department and which document level.
Granular admin rights
Give a person only the admin pages they need, using grouped switches for access, masters, users, settings and logs.
Full audit log
Every action with user, date, account, PC name and browser, with filters for investigations and audits.
Joiners and leavers
Microsoft 365 and HR sync keep users current, so people who leave lose access, and inactive people in approval chains are flagged in the health score.