Everyone sees only what
they are authorized for.
Role-based access. Department isolation. AI respects every boundary.
Roles for every person — owner, admin, editor, viewer — and department-level access.
ROLE HIERARCHY
Owner
Full control. Billing. Transfer ownership. Delete tenant.
billingusersall projectssettings
Administrator (Admin)
User management, all projects and departments. No billing access.
usersall projectssettings
Editor
Create and edit projects where assigned. Full task management.
own projectstasksdocuments
Department Admin
Edit any project in their department. Can send invitations.
department projectsinvitations
Viewer
View only. Sees only assigned projects.
view onlyassigned projects
THREE LEVELS OF ISOLATION
Tenant Isolation
Company A never sees Company B's data. Every request is verified at the data level.
Department Walls
IT does not see Finance projects. Dept Admin is locked within their department.
Legal Entity Separation
Multiple companies in one tenant with their own projects and documents.
SCENARIO: "WHICH PROJECTS ARE AT RISK?"
Same question — different answers depending on role:
Owner
AI analyzes all 15 projects across all departments.
Department Admin
AI analyzes only 4 projects in their department.
Viewer
AI analyzes only 2 assigned projects.
AI respects every boundary
Every AI action and document search is limited to projects the user can see — at the data level, not just in words.
AI is powerful.
But it only knows what it's allowed to know.
