People hub · Access & Roles

Access controls your CISO will sign off on.

RBAC + SAML SSO + SCIM provisioning + per-record scoped sharing + audit log + per-region data residency. Built for the security review, not the sales pitch.

Part of the People hub.

What you get

Core capabilities.

Role-based access

Predefined roles (Admin, Manager, IC, Guest) + unlimited custom roles. Granular per-hub, per-action permissions.

SAML SSO + SCIM

Okta, Azure AD, Google Workspace, OneLogin, Auth0. SCIM provisioning auto-deactivates departing users.

Scoped sharing

Share a record (a person, an SOP, a KPI) with specific people for a set time. Auto-expire support.

Audit log

Every read, write, export, share — logged with user, timestamp, IP, device. Searchable; exportable; tamper-evident.

Data residency

EU, India, or US data residency. Pinned at workspace creation; honored end-to-end for storage, AI, and backups.

Guest accounts

Free guest accounts for contractors, board members, external auditors. Scoped read-only access; never count toward seat billing.

Common questions

Frequently asked.

Still curious? Chat with the team.

What compliance certs do you hold?
SOC 2 Type II, ISO 27001, GDPR + DPDP (India). HIPAA available for Scale customers in regulated industries.
Can I require MFA?
Yes — workspace-level enforcement, optional per-role override, hardware-key support via WebAuthn.
How long is the audit log retained?
12 months on Growth, configurable up to 7 years on Scale. Exports to your SIEM via webhook.

Stop juggling tools.
Start running the business.