Account security and how your data is kept separate

Passwords are stored using strong one-way hashing (bcrypt), never in plain text, and must be at least 8 characters. Sign-in attempts are rate limited by both email address and network address, so repeated guessing is quickly throttled.

If you reset your password, that reset does more than change the password: it signs out every other session on your account. Any device that was logged in is booted within about a minute. This is your fast way to lock out anyone who may have had access, so reset your password if you ever suspect it has been shared or compromised. Reset links are single-use and expire, so an old link cannot be reused.

Access changes take effect quickly rather than lingering. Your session re-checks with our servers roughly once a minute, so if an admin changes your role, suspends you or removes you, or if you reset your password, the change is enforced within about a minute instead of waiting for your login to expire.

Suspended people are denied sign-in with the same generic message as a wrong password, so it is never possible to tell from the login screen whether an account is on hold.

Your data is isolated by account, often called your tenant. Every request is scoped to your own account, so you only ever see your own tools, documents, members and suggestions. There is no path to another company's data.

That isolation is enforced on every action, not just on screen. For example, a document can only be downloaded after we confirm it belongs to your account, and team lists and suggestions are always filtered to your workspace before anything is returned.