Security
Security built into the record.
Admins can require two-factor sign-in, every change is on an append-only trail, and no one can export the whole organization in one file.
Why it matters
Your register is a record. It should behave like one.
A register that anyone can edit or export quietly is no record at all. The Register limits who can do what, keeps every change on a trail nobody can alter, and makes access easy to grant and quick to take back.
Two-factor sign-in
Members sign in with a password and an authenticator app, with single-use recovery codes. Admins can require it for everyone.
An append-only trail
Every change is one entry on the activity trail, and the trail has no edit or delete path.
No whole-organization export
Any view downloads as a CSV, but no role can export the entire organization in one file.
How access works
Least access, by default.
Roles limit actions
Admin, Operator and Viewer each see and do only what their role allows.
Links stay separate
A Person's Request Link runs on its own cookie and its own token audience, apart from the dashboard.
Access ends at once
Deactivating a Member ends every one of their sessions before the change returns.
Every Member, exactly the access they need.
Three roles and two flags decide who can change the register, who needs approval and who may approve.
Sign-in
Two factors, and sessions you control.
Members enrol an authenticator app and keep single-use recovery codes. When an Admin deactivates a Member, every session ends immediately.
Questions about security
How do Members sign in?
With a password and a one-time code from an authenticator app. Recovery codes work once each, and Admins can require two-factor sign-in for the whole organization.
Is single sign-on available?
Single sign-on is planned. The sign-in is built so a provider can be added later without changing Members, roles or policy.
Can someone export all of our data at once?
No. Every view downloads as a CSV and the register report lists your Assets, but no role can take the whole organization — every Person, custody chain and attachment — away in one file.
Can the history be changed?
No. The custody chain and the activity trail are append-only: entries are added and never edited.
Keep exploring
Ask us the hard questions in the demo.
Book a demo and we'll walk through roles, sign-in and the activity trail on sample data.
