Departments, branches & access policies
LiveDepartments and branches as records, and access policies — IP allowlist, allowed platforms, session lifetime — enforced on every request.
- ✓Departments and branches; at most one head office
- ✓A tax ID on each branch
- ✓IP allowlist, proxy-aware
- ✓Allowed platforms: web and the phone app
What it is.
Departments and branches are rows your organisation owns; people and matters can be placed in a department, and a branch carries its own tax ID, with at most one head office. Access policies are checked on every signed-in request except sign-in and sign-out themselves, so a person can always get in and out.
The checks are an IP allowlist, allowed platforms (web or the phone app), session lifetime counted from sign-in, and a device limit counted at phone sign-in. A policy that would lock out the admin saving it is refused. Multi-factor authentication can be recorded as a requirement but is not enforced — sign-in has no second factor yet, and the console says so.
Three steps.
End to end.
Add departments and branches under organisation settings.
Set the allowlist, platforms, session lifetime and device limit under users and permissions.
Requests outside the policy are refused; sign-in and sign-out stay open.
What you get.
- ✓Departments and branches; at most one head office
- ✓A tax ID on each branch
- ✓IP allowlist, proxy-aware
- ✓Allowed platforms: web and the phone app
- ✓Session lifetime from sign-in; phone refresh refused past the cap
- ✓Device limit at phone sign-in
- ✓Saving a policy that would lock you out is refused
Quick answers.
No. It can be recorded as a policy, but there is no second factor to enforce yet.
No — it is the age of the session from sign-in.
More in Team & Enterprise.
Not built. The organisation is the isolation boundary; matters are how work is grouped inside it.
Four seeded roles with per-capability view / add / edit / delete permissions, plus custom roles you define.
Shared editing sessions on a document, and a propose-review-merge flow for changes to it.
Group contracts, research, obligations, meetings and tasks by matter — with a timeline of everything that happened on it.