Team access, tenant isolation and account security

Your tenant boundary

Each organization is a separate tenant. Users operate inside an active organization, and tenant-scoped data, integrations, media and automation must stay inside that boundary. A user with access to more than one organization should always verify the active organization before making changes.

Use least privilege

• Give administrator access only to people who manage billing, integrations, users or critical policy.
• Use individual accounts; do not share passwords.
• Remove inactive members promptly.
• Review connected WhatsApp numbers and external integrations regularly.
• Keep API keys and tokens in a secret manager and rotate them after suspected exposure.

Enable two-factor authentication

Open Security, start two-factor setup, scan the authenticator QR, confirm a current code and store backup codes offline. Regenerating backup codes invalidates the old set.

Operational accountability

Use assignments, ticket history, order status and audit records to understand who changed important data. Do not copy customer records into unapproved personal tools merely for convenience.