Your team.
Your workspace.
Server-checked membership, explicit roles and a history of the decisions your team makes.
Account and workspace access
Sign in using a short-lived, single-use code sent to your email. Session cookies are HTTP-only and secure on HTTPS. Sign-in attempts and code sends are rate limited. No ChatGPT account is required. A valid early-access code is required to create your first workspace, unless you are already an invited team member. Each data request is scoped to a workspace and checked against current membership.
Five roles
Owners manage billing access and ownership. Admins manage members and settings. Members maintain records and offers. Reviewers can record checks and finalize decisions. Viewers can read and export. The server enforces these permissions even if a browser control is bypassed.
Decisions that keep their context
Reviews record the reviewer, time and a fingerprint of the selected offer and requirements. Changing those details clears the review. Finalized requests must be reopened before editing. Workspace changes are recorded on the server with their actor.
Data and documents
Structured records are stored in Cloudflare D1. Contract files are stored in R2 and downloaded only after a workspace access check. Integration secrets are encrypted before storage and are never returned to the browser. Optimistic revisions prevent one tab from silently overwriting another.
Invitations and recovery
Invitations are bound to an email address, stored using a hashed token and expire after seven days. Access changes take effect on the next server request. Archived applications, requests and documents can be restored.
Email delivery
SendGrid delivers sign-in codes, invitations and opted-in reminders. A workspace may also configure its own Resend sender. The delivery log shows queued, sent and failed messages. Reminder emails require an owner or admin to opt in.
Data ownership
Export records as CSV, download a JSON backup and download your documents. Restoring a backup clears approval checks so an imported record cannot manufacture a reviewed decision.
Current product scope
The apps work with records and offers your team enters or imports. Purchases and cancellations happen with your vendors. This release does not claim a compliance certification or automatic SSO discovery.