What it covers
- Email and password sign-in with password resetAvailable
- Invitation links for users and employeesAvailable
- Authenticator-app two-factor sign-in, enforceable per companyAvailable
- Company password policy above a platform minimumAvailable
- Sessions and devices list with sign-out and lockout protectionAvailable
- System and custom roles with a permission registryAvailable
- Data scopes so managers see their own teamsAvailable
- Separate platform staff accounts and rolesAvailable
- Audited support access from the platform to a company userAvailable
- Audited owner or HR access to an employee viewAvailable
- Allowed email domains per companyAvailable
- Single sign-on with Google Workspace or Microsoft EntraNot in current scope
- SCIM user provisioningNot in current scope
- Phone number and one-time code sign-inNot in current scope
Availability checked on 25 September 2026.