Every project belongs to one organisation. Nothing is shared across organisations unless someone explicitly grants access to it.
Every project traces back to one organisation. A different organisation's project is a 404, never a 403 that would confirm it exists.
Works with any authenticator app. Enrollment stays disabled until a real code confirms it. Backup codes are single-use.
Sign in with a Google Workspace account. Goes through the same signup gate password accounts do.
People are added to the projects they work on, not to everything in the account. A role can be full access or read-only.
Signups, logins, access grants and revokes, and every run's own start, pause, cancel and resume.
Share a project with a client or stakeholder without giving them anything they could change.
