THE PILOTALL WAY
Permissions follow membership.
A professional view is not a security role.
Owner and administrators
Office management and sensitive lifecycle operations require the reviewed owner or administrator permission. Team ownership cannot be transferred through the invitation screen.
Managers and members
Assignments target active members of the same office. Server authorization and database RLS remain authoritative even when a button is hidden.
Independent approval
The requester cannot approve their own sensitive operation. A single-founder office must leave such operations pending until another independent authorized reviewer is available.
Invitations
Private links expire and require the intended matching verified identity. Team and email integrations must be configured before invitation delivery can be claimed.
BUILD TRUST INTO THE WORK
Start with a verified workflow.
Explore the product and its current limits before connecting a provider.
Read the getting-started guide →