Notifications and Settings

The Settings section centralizes platform customization options, user management, notification controls, and account security settings. Access it by clicking your name or avatar in the top-right corner and selecting Settings.

User Management

In the Users tab, you can invite new team members, change roles, and revoke access. To add a user, click Invite user, enter their email address, and select the appropriate role. The invitation is sent by email with an activation link.

Each user receives a set of permissions based on their role. See the Roles and Permissions article to understand what each role can view and edit in the platform.

Notifications

The platform sends email notifications for important events. In the Notifications tab, you can define which events trigger alerts and how often:

• Failing tests — When an automated check detects that a control is failing
• Overdue action items — Alert when an action item is approaching its due date or already overdue
• Expiring evidence — Warning when evidence is approaching its defined expiry date
• New comments — When someone comments on a control or action item you follow
• Weekly summary — Report on the overall progress of the compliance program, sent every Monday
  
  

Organization Information

In the Organization tab, you can update the company name, logo, industry, and contact information. This information is displayed on the public Trust Center and appears in reports and exports generated by the platform.

Account Security

In the Security tab, you can enforce two-factor authentication (2FA) for all organization users, configure SSO (Single Sign-On) via an external identity provider, view access history and active sessions, and define session expiry policies.

We recommend enforcing mandatory 2FA for all accounts — this setting is verified as evidence in ISO 27001 and SOC 2 audits.

Data Export

In the Data tab, you can export a complete file with all your controls, evidence, action items, and assessments. This feature is useful for internal backup, executive reporting, or data migration.