Access management
Security and access control: only the right people get in.
Two-step verification, roles per person, trusted devices and an access log for your company software.
Interactive demo · for guidance only
Sign in the way your team would: password and second step.
Try access with two-step verification, review the access log and change permissions by role. All simulated in your browser.
Recover access
We send a code to your work email so you can choose a new password.
Step 2 · Verify it's you
Open your authenticator app and enter the 6-digit code. It changes every 30 seconds.
We have sent a code to the mobile ending in ···421.
Plug in your key and touch it when it blinks.
Active sessions
- This deviceNow · Bilbao
- Ane's iPhoneYesterday, 18:42 · Getxo
- Office laptop3 days ago · Durango
| When | Person | Action | Result |
|---|---|---|---|
| Today, 09:12 | Ane E. | Sign-in (app) | OK |
| Today, 08:55 | Mikel U. | Exported orders | OK |
| Yesterday, 19:30 | Jon A. | Password change | OK |
| Yesterday, 11:04 | Unknown | Sign-in · wrong password ×3 | Blocked |
| Orders | Customers | Invoices | Settings | |
|---|---|---|---|---|
| Administration | ||||
| Management | ||||
| Sales | ||||
| Read only |
Recovery codes
Ten single-use codes in case you lose your phone. Keep them somewhere safe.
Alerts
Your data
Any user can download what the system stores about them (GDPR right of access and portability).
Download my data (JSON)Simulation in your browser: nothing is stored. The real system is built into your dashboard, portal or store.
This is a demo, not the final product. It is a simulation in your browser so you can get an idea of how the service would work. Your system is designed from scratch, with your brand, your data and your integrations. Nothing you type here is stored or sent.
What is included
Everything that goes into the quote.
- Two-step verificationAuthenticator app, SMS or hardware key.
- Roles and permissionsEach person sees and does only what they should.
- Trusted devicesLess friction on usual machines, alerts on new ones.
- Access logWho signed in, when and from where. Exportable.
- Passwords and recoveryClear rules and safe recovery, no shortcuts.
- Backups and encryptionData encrypted at rest and verified backups.
Capabilities
Peace of mind as standard.
What every business software should have, and almost none does.
Two-step verification
App, SMS or hardware key; can be required per role.
Passkeys and fingerprint
Password-free access from the phone or the laptop.
Roles and permissions
Who sees what and who can change it, per module and per field.
Access log
Every login, change and export is recorded and can be reviewed.
Lockout on attempts
Limited failed attempts, alerts and secure recovery.
Sessions and devices
Active sessions visible; remote sign-out of any device.
Encrypted backups
Daily encrypted backups, with tested restores.
Headers and audits
Browser security policies and periodic review of dependencies and configuration.
Integrations
It connects with what you already use.
We can link the solution with these tools, among others. If you use one that isn't listed, ask us.
Identity
- Google Workspace
- Microsoft 365
- Passkeys (FIDO2)
Keys and apps
- YubiKey
- Google Authenticator
- Microsoft Authenticator
Backups and encryption
- AES-256
- Almacenamiento en la UE
- Restauración probada
Brands belong to their owners and are cited only as a compatibility reference.
Questions about this service
What people usually ask before starting.
Another question? Write to us and we'll answer within 24 h
Is it a hassle for the team?
The second step is only asked on new devices or every so often. Day to day, you don't notice it.
Does it work with my current system?
Almost always. We integrate it into what you already use or include it in what we build with you.
What is two-step verification?
Besides the password, a second thing only you have is requested: a code from an authenticator app, an SMS or a physical key. That way a leaked password is not enough to get in.
Can you define who sees what inside the software?
Yes. We create roles (admin, management, sales, read only…) and each person sees only what belongs to them. Changes are kept in the access log.
Does it help with data protection (GDPR)?
Yes: named accesses, a log of who gets in and what they do, data encryption and backups. We document the measures for your record of processing activities.
Who can get into your system today?
Tell us which tools your team uses and we will tell you where to start.