Security and access control
Colabdeck is built for businesses that collaborate with clients without flattening permission boundaries. The claims below reflect capabilities present in the product architecture — not unaudited compliance badges.
We do not claim SOC 2, ISO, HIPAA, or independent audit status on this page. Ask during a demo for the current assurance posture.
Authentication
Users sign in with password authentication or magic-link email flows. Password reset is supported. Session access tokens are short-lived with refresh handling in the application.
Roles and permissions
Sensitive reads and writes are gated by role-based permissions in the API and reflected in the UI. External clients receive a restricted collaboration experience.
Client visibility
Content can be scoped so internal notes, internal files, and restricted finance records are not exposed to clients. Shared channels, approved tasks, shared files, and onboarding items can be made client-visible intentionally.
Auditability
Sensitive actions such as permission and finance-related changes are designed to be auditable. Ask for details relevant to your compliance review during onboarding.
Responsible disclosure
If you believe you have found a security issue, contact hello@colabdeck.com with enough detail for investigation. Do not access data that is not yours.
Ready to streamline your client work?
Book a walkthrough and see chat, projects, client visibility, files, and finance in one workspace.