Features

Roles, two-factor, and a way to suspend somebody

Owner, admin, member and viewer, with two-factor authentication available on every plan including the free one.

The roles

Owner holds billing. Admin manages people and settings. Member creates and edits. Viewer reads reports and changes nothing — which is the role most requests for access actually want.

Suspension rather than deletion

Somebody on leave, or an account you want closed for a fortnight while something is sorted out, can be suspended with an end date. Deleting them takes their work with them, and "remove this person for now" is a much more common need than "erase this person".

Two-factor

Authenticator apps, with recovery codes issued once. Available on every plan, because an account holding a company's printed codes is worth protecting whether or not that company is paying us.