How is sign-in protected?

Two-step verification

After the password, users also need a six-digit code sent by email or generated by an authenticator app such as Google Authenticator. This is enabled for everyone by default. On a trusted device, the extra code is not requested again for 30 days.

The owner can choose in Settings whether two-step verification is required for everyone, required only for admins, or disabled.

Passwords

New passwords must contain at least 12 characters with letters and numbers. Common passwords are rejected. After too many failed login attempts, the account is locked for 15 minutes.

Sign in with Google

Users can also sign in with a Google account without using a Corganize password.

Critical actions

For irreversible or sensitive actions, such as deleting a user, transferring owner rights or changing another person’s password, the system asks for your own password again. This helps prevent damage even if a computer is left unlocked.

What happens when someone leaves the company?

Mark them as having left and they can no longer sign in. Their data and accepted acknowledgements remain archived.