Workspace security

Workspace separation

Mencey scopes operating data to the active workspace. Confirm it before creating records, importing data, changing settings, or sharing a public link.

Identity security

• Use an individual account for every teammate
• Enable multi-factor authentication where required
• Review and revoke unfamiliar sessions
• Use the minimum role required

Integration access

Integration access details are sensitive workspace information. Manage them only through the designated settings panels and review them when ownership changes.

Public content

Booking pages, shared reports, invoice links, and signing routes are for external recipients. Verify the target, access controls, and content before sharing.

Regular review

• Review members and pending invitations
• Revoke stale sessions and unused integrations
• Check primary domains and email senders
• Confirm automation targets
• Report unexpected activity to the workspace owner