Security and trust
How the workspace controls who signs in, what each person can open and what is recorded, described in the product's own terms.
Identity
Who can sign in
Access starts with how people sign in, and who decides that they can.
-
Single sign-on
People sign in through their organization's identity provider, so access follows the way the organization already manages its people.
-
SCIM provisioning
Accounts and groups can be provisioned and deprovisioned from the organization's directory.
-
Multi-factor authentication with step-up
Sensitive actions, such as approving or exporting a filing, can ask for a fresh multi-factor check.
Access
What each person can do
Permissions follow roles that the organization defines, and the controls between roles are the organization's to set.
-
Custom roles
An organization defines its own roles and chooses the permissions each one holds.
-
Segregation of duties
The person who prepared facts can be barred from reviewing or approving them.
Isolation
Where one organization ends
Each organization is its own space, and the platform keeps one organization's work apart from another's.
-
Strict isolation between organizations
An organization's filings are kept apart from other organizations', and are opened only by the people it has given access.
-
Per-organization file storage
Each organization's files are stored apart from every other's.
Audit
What is recorded
Changes and access leave a record that an organization can read back.
- Audit trail of access and changes
- Who changed what, and when, is recorded, and so is who read a filing before its release.
Responsible disclosure
Tell us about a security concern
- Send a security concern to sales@disclosiq.com.
Related controls
-
Engagement controls
Engagements, independence checks, ethical walls, and embargo and insider lists.
-
Section workflows
Route the section, not the email.
See one section, end to end.
We'll take one note from a filing like yours from spreadsheet to reviewed, tagged disclosure in 20 minutes.