Security Policies

Enforces strong passwords: minimum 12 characters, uppercase, lowercase, numbers, and symbols. Blocks commonly used passwords.

Monitors and blocks sensitive data from being exported, shared externally, or uploaded to unapproved services.

Requires MFA for all admin users and optional for standard users. Supports authenticator apps, hardware keys, and passkeys.

Enforces rate limiting, scopes, and IP restrictions on API keys. Monitors for suspicious API usage patterns.

Automatically logs out inactive sessions after 60 minutes. Requires reauthentication for sensitive actions.

Allows administrators to restrict access to specific IP ranges. Blocks traffic from unauthorized regions.

Requires managed or trusted devices for admin access. Unmanaged devices require additional MFA.

Controls sharing with external users. Requires approval for sharing confidential or sensitive data externally.