Security and sign-in
Built in for everyone: two-step verification at every sign-in, automatic sign-out after 30 minutes without activity, and sign-out everywhere when a password changes or a person is deactivated. Each workspace’s data is kept apart by the database itself.
| Setting (under Settings) | What it does |
|---|---|
| Company sign-in and provisioning | Lets people sign in with Microsoft Entra ID, Okta, Google or another standard identity provider, and creates or deactivates accounts automatically from your directory (SCIM) |
| Microsoft sign-in | A quick set-up for Microsoft 365 organisations |
| AI | Switches external AI on or off for the whole workspace. Names and personal details are removed before any text is sent for analysis |
| Letterhead and company stamp | Your letterhead on every Word and PDF export, and your stamp on signed documents |
| Integrations | API keys for your own systems and signed webhooks that notify them when contracts change |
| Microsoft Teams | Posts approval and signing notifications to a Teams channel |
Keep API keys secret: create one per system, name it clearly, and revoke it when that system is retired.