Two-factor by default, SSO for the company, tokens of other systems encrypted at rest, one owner per workspace, every action in the log.
2FA by TOTP or email code. SSO over OIDC for the whole company. Roles: owner, admin, manager, client, crew.
Every query filtered by workspace taken from the session, never from the request. Foreign tokens sealed with a key that lives only in the platform.
Card data never touches us: Paddle is the merchant of record and takes EU VAT with it.
Who changed what, when, from where — split into rare decisions and frequent edits so the important ones are not buried.
A workspace behind an unpaid invoice still reads and exports. Seven days of grace before anything closes.
EU edge on Cloudflare, database in the EU, mail from a verified domain.
Connect Jira, pick a sprint, set your rates. Sixty seconds later you know what it costs and who will not make it.
Start free — 14 days