Security and data isolation

Isolation between organisations

Every read and write is scoped to the organisation checked on the server, including search, exports, attachments, the widget and background jobs. Automated tests check that an organisation can neither read nor change another one’s data.

Accounts and permissions

• Administrator, Support agent and Viewer roles; an agent can be restricted to their teams’ requests.
• Depending on the plan (see pricing): adapting the permissions of the Support agent and Viewer roles, and creating custom roles; nobody can grant a permission they do not hold.
• Two-factor authentication with an authenticator app (TOTP); an organisation can make it mandatory for its administrators and for members holding sensitive permissions.
• A list of your open sessions, which you can revoke remotely.

Data protection

• Mailbox passwords and widget secrets are encrypted in the database and never displayed again.
• Attachments are stored outside the server’s public area and served only after a permission check.
• An audit log records sensitive operations.

Exceptional operator access

For support purposes, the Tikivio operator can open a read-only access to an organisation for 30 minutes, with a mandatory reason. Each access is logged and a banner shows it for its whole duration.

Security and data: how-to