Docs
Browse the docs
  1. Docs
  2. Administration
  3. Security

Security

How Hourglass protects your workspace, and the controls admins have.

Security at a glance

Records are encrypted at rest with AES-256 and in transit with TLS 1.2 or later. Every change to a record is kept in its history, and permissions decide who can see or edit each object and field.

Admins can add single sign-on, user provisioning, an IP allowlist and the audit log, described in the pages below.

Two-step verification

People can add an authenticator app or a hardware security key under Profile › Security. Admins can require two-step verification for the whole workspace from Settings › Security; anyone without it set up is asked to add it at their next sign-in.

Single sign-on (SSO)Let people sign in through your identity provider with SAML or OpenID Connect.User provisioning (SCIM)Create, update and suspend users from your identity provider.IP allowlistLimit sign-ins and API calls to your network.Audit logA record of who did what in the workspace.
PreviousUsers and rolesNextSingle sign-on (SSO)