Security, data and GDPR
What security measures protect accounts?
Passwords stored as hashes, two-factor authentication (TOTP), passkeys, permissions by role and by company, logging of sensitive operations and encrypted connections (TLS).
Two-factor authentication is set up from your avatar → « Account security » → « Configure ». We may require two-factor authentication or a passkey for accounts with extended rights. If a member loses access to their two-factor authentication, the owner or an administrator can reset it. An owner's can only be reset by an owner. Security is a shared responsibility: on your side, you protect your accounts, devices, clocking stations, codes and API keys, you apply the principle of least privilege and you remove unnecessary access without delay. As no connected system is invulnerable, these measures do not guarantee the absence of security flaws or data loss.
Reference : clause 18.1, clause 18.2, Annex 2 A of the terms and conditions