Security and access

The right people see the right processes.

Choose exactly who can view, edit or approve each process. Each company’s data is kept completely separate.

⊘Another company
Your company
Business Current Account OpeningRequest a new laptopAccount Closure and Final Settlement
Partner · on your terms
⊘Another company

Role-based access

Access levels named for what they allow

Or create your own. Grant access process by process.

Admin
Manage people, access and the company’s settings
Can edit
Build and change processes, manage and accept risks
Can review
Approve and publish to your team
Can view
Read every process
Can edit structure
Keep the org chart current
Can manage governance
Keep the registers
Can view attestations
See who confirmed each procedure
Partner
A consultant working in a client’s company

Sign-in

Signing in

Microsoft sign-inUse your existing work accounts, or require them.
Email and passwordWith self-service reset. Locked for 5 minutes after 5 failed attempts.
Invite-only accountsNo public sign-up. Your admin invites each user.
Directory syncPeople and groups from Microsoft Entra ID.

Connected AI apps

AI assistants only where you allow them

Your manual in the AI app people already use, on your terms.

One switch for the companyAn admin can turn them off at any time.
Each user agreesNothing connects without their consent.
Read only by defaultDrafting is a separate permission.
AI that follows your processes
Your AI assistantConnected as you · one company
Connected
Reads
Request a new laptopPublished
Approve the request
Line manager
Approve a non-standard specification
IT Asset Manager
  • Sees only what you can see
  • Edits drafts, if you allow it
  • Can’t publish or delete
  • Can’t remove Not for AI apps activities

Data separation

Kept apart, kept on record

Hosted on Microsoft Azure. See our privacy policy.

One space per company

Processes, people and evidence stay separate.

Consultants work in client spaces

Only where they are given access. The client can end it at once.

Separated in the database

Every company table enforces row-level security.

Compliance and audit evidence
Security review

Questions from your security team?

We’ll cover access, sign-in and hosting.