Security and Access Control
Organisation data isolation, three permission levels, secure sign in with single sign on, lockout, and document fingerprinting.
Security and access control keeps each organisation's data isolated, controls what each team member can see through permission levels, and protects sign in and signed documents with multiple layers.
How it works
Every organisation operates in its own isolated space. Contracts, templates, signers, audit trails, and reports are tagged to an organisation at creation, and the data layer refuses to return data tagged to a different organisation, so cross organisation access is structurally prevented rather than only policy prohibited.
Sign in is protected by secure sessions against forged requests and session hijacking, by single sign on integration with the company's existing identity system, and by automatic lockout after a burst of failed attempts from the same source. Three permission levels control access. At the moment of signature, the platform creates a unique fingerprint of the exact document contents, so any later change produces a different fingerprint and reveals tampering.
Key capabilities
- Organisation data isolation built into the platform foundation.
- Three permission levels: admin with full control over settings and data, manager who can create and manage contracts but not organisation settings, and viewer who can see assigned contracts only.
- Secure sessions and single sign on integration, with access centrally managed through the company's identity provider.
- Automatic lockout after repeated failed sign in attempts, with a recovery path for legitimate users.
- Document fingerprinting that detects any post-signature change.
- Suspicious activity throttling and consistent response timing to limit information leakage.
Tips
With single sign on, removing a user from the company identity system automatically revokes their platform access, so no separate manual revocation is needed when someone leaves.