Account access and security

Every team member should use their own account. Individual access supports accurate audit history, safer role changes, and immediate removal when responsibilities change.

Assign only the locations and capabilities needed for a person’s role. Review administrative and financial permissions regularly, especially after role or location changes.

• Require multi-factor authentication for administrative access.
• Remove inactive accounts promptly.
• Never send passwords, recovery codes, or payment-card details in a support request.

Use the approved password recovery process. If an administrator is unavailable or suspicious activity is present, contact support with your business name and a safe callback number.