Give every teammate exactly the access they need

Teams & security

1. 01

   Invite your team

   Invite colleagues by email with a link that's valid for 7 days. Resend, change roles or deactivate at any time — deactivating someone signs them out everywhere, immediately. Your organisation always keeps at least one admin.

2. 02

   Your company domain brings colleagues to you

   Claim your company's email domain, and colleagues who sign up with an address on it are offered your organisation instead of starting a new one. Nobody learns that your organisation uses bebonium until they have proved they own an address on your domain.

   • By default each person asks to join, and an admin approves or declines
   • Automatic join is an option, behind a clear warning — and nobody can join as an admin that way
   • Personal email domains such as gmail.com can't be claimed, and each domain belongs to one organisation
   • If another organisation has claimed your domain, our support team can hand it back to you
3. 03

   Roles, page by page

   A role grants read or write access to each page of the app — this page only, if that's all someone needs. Results have their own page, so a colleague can build surveys without seeing a single answer.

4. 04

   An activity log for everyone

   See who did what and when, filtered by person, page, action or date. Everyone can always see their own activity, and changes to people's details never show those details in the log.

5. 05

   Support access, only when you open it

   When you want our help, open a support window for 1, 4, 24 or 72 hours and close it whenever you like. We can't open it ourselves.

   • Support can edit, publish, close and duplicate surveys inside the window
   • Support can't create a survey from scratch or delete one, read responses, or touch users or roles
   • Every support action appears in your activity log
6. 06

   Help without leaving bebonium

   Raise a support ticket from the app and follow the conversation there or by email, then mark it resolved when it’s sorted. Everyone sees their own tickets; a role can let someone see and answer every ticket of your organisation.

7. 07

   Sign in your way, securely

   Sign in with your email, your password and a one-time code sent to your email — or with your Google or Microsoft account, with no password or code to type. Passwords are stored as Argon2id hashes, and repeated failures lock the account and slow attackers down.

   • Google and Microsoft sign-in ask only for your name and your verified email address
   • Sign up with Google or Microsoft too — you still give your organisation's details, just without a password
   • A session started with Google or Microsoft ends after 24 hours, so an account closed there stops working here within a day