Security and governance: you decide what agents do
Each user signs in with two-step verification by email and can use passkeys; roles are defined per organization and each organization's data is isolated. AI agents work with humans in the loop: workflows pause to ask for approval and operators can take over the bots.
What is included
- Two-step email verification on by default, and passkeys (fingerprint, Face ID or hardware key) as a second factor.
- Trusted devices for 30 days; if the cookie is copied to another machine it is detected, devices are revoked and an email alert is sent.
- Roles specific to each organization, assignable to users and whole teams, with Admin and User roles by default.
- Data isolation per organization.
- External service credentials stored encrypted and never shown back.
- Human approval in workflows and operator handover over the bots.
How it works
- Sign-up creates the organization and leaves the registrant as Admin.
- The administrator defines roles and assigns them to users or teams.
- Users enable passkeys and trusted devices as needed.
Limits worth knowing
- The session lasts 60 minutes; when it expires you need to sign in again.
- The default Admin and User roles cannot be renamed or deleted.
Frequently asked questions
- Can I sign in without a password?
- Yes, with passkeys; passkey sign-in does not ask for the email code because it already acts as a second factor.
- Can I create my own roles?
- Yes. Each organization creates its own roles and assigns them to users or teams.
Related features
Want to see it with your data?
Tell us your case and we will show you how it fits the platform.
Content reviewed on