Security and data: how-to

Two-factor authentication

Each user turns on two-factor authentication in their Profile (/profil/totp) with a TOTP app and keeps their recovery codes. An administrator can make it mandatory for the organisation’s administrators under Security (/o/<your-organisation>/parametres/securite).

Sessions

My sessions (/profil/sessions) lists your open sessions; revoke one or all of them remotely.

Exporting your data

An administrator requests an archive under Data export (/o/<your-organisation>/parametres/export): JSON or CSV, with or without attachments. A notification tells you when it is ready; it can be downloaded for 72 hours.

Closing your organisation

Under Organisation closure (/o/<your-organisation>/parametres/fermeture), an administrator requests the closure. It can be cancelled for 30 days; after that, the organisation’s data is permanently deleted, except invoices kept for accounting obligations.

Operator access

For support, the operator can open a 30-minute read-only access to your organisation, with a mandatory reason; each access is logged.

See also: privacy policy and subprocessors.