Security & access

Access and authentication

Available on Riskly Basic and Pro unless noted otherwise.

• Invite-only team access

  Members join by invitation. Sign in with password or magic link. No public self-signup into your organisation workspace.

• Roles and tab permissions

  Owner, admin, member, director, and viewer roles. Admins can limit which tabs each person can view or edit so people only see what they need.

• Multi-factor authentication (MFA)

  Members can enrol an authenticator app on their account. Owners and admins can require MFA organisation-wide so every sign-in uses a second factor.

• Session security

  Sessions are limited to one active device per account and time-boxed to 30 days. Sign in elsewhere ends your previous session on the next refresh. Use sign out everywhere in account settings when you need to end all devices immediately. MFA step-up and trusted-device handling apply to sensitive actions.

• Enterprise sign-in (optional)

  If your IT team uses Azure AD / Microsoft Entra or another SAML identity provider, owners can request organisation SSO for your work email domain. When enabled, SSO can satisfy MFA for members who sign in through your IdP. Available on Basic and Pro when configured.

Data, logs, and audit evidence

• Organisation activity log

  Settings → Activity shows a record of significant actions in your organisation for oversight and audits.

• Full data export

  Organisation owners can export register data from Settings when you need a copy for insurers, boards, or migration.

• Calendar and chat integrations

  Subscribe to organisation or personal calendar feeds in Outlook, Google Calendar, or Apple Calendar. Optionally post new hazards and incidents to Slack or Microsoft Teams using webhooks you control. Configure under Settings → Integrations.

• Privacy Act 2020

  Riskly Limited is a New Zealand company. See our Privacy Policy for what we collect, processors we use, and your rights.

• Your data stays yours

  Operational content belongs to your organisation. You can leave an organisation, delete an organisation you own, or delete your sign-in account when permitted.