Least-privilege access
Roles with data scopes — company, branch, department, team, reporting line or self — custom roles, and per-person grants where a revoke always wins.
How it worksFor finance & regulated teams
Controls you can show
an auditor.
Who can see what, who changed what, and how data may leave — recorded as you work, ready when the audit comes.
At a glance
Least privilegeRoles with data scopes
Strong sign-inTwo-step and single sign-on
Full audit logEvery administrative action
Export controlOff until switched on
What you need
What Finance & regulated teams get
Strong sign-in
Two-step sign-in you can require for everyone, single sign-on with OIDC or SAML, and the power to see and end any active session.
How it worksEvery change on record
Sign-ins, permission changes, exports, payments and settings go to an audit log your auditors can read and export.
How it worksData leaves only by policy
Exports stay off until they are switched on, can be blocked for any one person, and are watermarked.
How it worksApprovals for sensitive changes
Approval workflows put a second pair of eyes on the changes that matter.
How it worksData-protection requests handled
Export a company's data, and erase a person's data on request, with every step recorded.
How it worksGetting started
Up and running in three steps
- Set roles, sign-in rules and export policyDecide who sees what, and how data may leave.
- Work as usual — everything is recordedSign-ins, changes and exports go to the audit log.
- Pull evidence when the auditors askThe audit log and reports, ready to export.
Questions
Is there an audit log on every plan?
Yes. Every plan includes the full console and audit logging.
Can we require two-step sign-in and single sign-on?
Yes. Two-step sign-in can be required for everyone in the company, and single sign-on works with OIDC and SAML identity providers.
Can we stop data from being exported?
Yes. Exports stay off until they are switched on, and can be blocked for any individual person.
Can we host it ourselves?
Yes. The platform is self-hostable on your own infrastructure (Node and MariaDB).
See it working for finance & regulated
Start a free trial on your own devices, or book a demo and we will walk you through it.