Protect accounts and private documents

Use verified identities, scoped roles and reviewed operational controls.

Administration · Company admin, Wholesaler, Hub admin

How it works

Complete authenticator enrollment and verification before enabling an organization MFA requirement.
Review active memberships, staff sessions, licenses and invitations.
Maintain retention, response ownership and recovery evidence in Security & operations.
Keep originals and private storage access within the approved workflow. Do not put secrets in form answers or incident notes.
Validate recovery, provider configuration and real delivery before accepting a production workload.

What to check

Security attestations are administrator records, not independent certification. The permission matrix describes boundaries; server checks enforce them.

Related guides

Manage people, assignments and licenses
Connect an assistant with MCP

Create your intake form · Start your brokerage workspace