# Organization Settings
URL: https://docs.autociso.io/console/settings/organization/
Description: Configure your organization's profile, sign-in policy, and data management. Changes here affect your entire organization.

*This is the help text the console shows in the help panel on this page.*

Configure your organization's profile, sign-in policy, and data management. Changes here affect your entire organization. [Only Owners can change settings](https://docs.autociso.io/getting-started/roles-and-permissions/); other roles see tabs they are allowed to use, and the rest are hidden.

---

## Identity Tab

Manage your organization's display profile.

- **Logo** — Shown in the navigation bar and in generated reports. Accepted formats: PNG, JPG, GIF, WebP (max 5 MB). Click **Upload Logo** to replace the current logo, or **Remove** to revert to the auto-generated avatar.
- **Organization Name** — The display name shown across all platform views, reports, email notifications, and exported documents. Keep it short and recognizable.
- **Country** — The primary country of operations. Used in scope statement templates and regional compliance checks (e.g. GDPR applicability for EU-based organizations).
- **Organization ID** — Your immutable organization identifier, assigned at creation. Required when raising support tickets, configuring API integrations, or setting up webhooks.

---

## Sign-In Policy Tab

Control how your team signs in. [Single Sign-On requires](https://docs.autociso.io/product/sso/overview/) [The Growth plan or higher](https://docs.autociso.io/getting-started/plans-and-features/); choosing among the built-in methods works on every plan.

- **Allowed Providers** — The sign-in methods your team is offered: Email / Password, Google, GitHub, Microsoft and, once connected and Active, your own identity provider. At least one method must stay selected. Click **Save** to apply. Removing Email / Password asks you to confirm, because nobody could then sign in with a password — make sure everyone, including you, can sign in with the other method first. Non-Owners see the list read-only.
- **Single Sign-On** — Connect [Google Workspace](https://docs.autociso.io/product/sso/google-workspace/), [Microsoft Entra ID](https://docs.autociso.io/product/sso/microsoft-entra-id/), [Okta](https://docs.autociso.io/product/sso/okta/), Generic OIDC or [Generic SAML 2.0](https://docs.autociso.io/product/sso/saml/). A new connection is **Pending** until you run **Test connection**; then it becomes **Active** and can be selected under Allowed Providers. Copy the **Redirect URI** (or **ACS URL** and **Entity ID** for SAML) into your identity provider. Turn on **Create accounts automatically on first sign-in** to give new people the role you choose under **Role for new accounts** (Member, Contributor or Auditor).
- **Your team's sign-in link** — Share this link with your team or add it to your intranet.
- **Email domains** — Optional. Leave it empty and anyone your identity provider authenticates can sign in. Add domains and only addresses at those domains can sign in to your organization.
- **Restore email & password sign-in** — Owners can use this button to bring password sign-in back if a sign-in change locked people out.

---

## Export / Import Tab

Transfer organization data or create a point-in-time backup. Only Owners can use this tab.

- **Export Data** — Click **Export...** to download a `.zip` archive. It includes connected applications and the asset inventory, employee and personnel records, audit history and findings, policies, controls and compliance mappings, and custom tags and classification data. The following are **not** included: uploaded file attachments, user account credentials, organization logo and branding, billing and subscription information, and audit logs.
- **Import Data** — Click **Import...** to restore from a previously created export archive (.zip). Choose an import mode: *All Data (Replace everything)* or *Lists Only (Assets & Employees)*. Importing overwrites existing data in this organization for the selected mode and cannot be undone — export your current data first if you need a rollback point.

---

## Integrations Tab

Connect AutoCISO to external tools. Visible to Owners and Managers. See the [Integrations help](https://docs.autociso.io/console/settings/integrations/) for the Jira setup steps.

---

## Partner Access Tab

Allow a [fractional CISO or partner firm](https://docs.autociso.io/product/posture/vciso-workspace/) to access and manage this organization on your behalf. Visible to Owners.

- **Generate link** — Creates an access link for your partner. Optionally enter an email under **Bind to email (optional)** so only that partner's account can use it. A link expires after 7 days and the Owner can revoke it at any time.
- **Pending invites** and **Connected** — Links not yet used, and the partner currently connected. An organization can be managed by one partner firm at a time.
- **Disconnect** — Removes the partner's access and deletes all partner-generated data (summaries, action items, reports). Your own organization data is not affected.

---

## Danger Zone Tab

Irreversible actions that permanently affect your organization. Visible only to Owners.

- **Delete Organization…** — Immediately blocks all member logins and disables all platform functionality. All data (employees, assets, audits, policies, and settings) is permanently and irreversibly destroyed after a **3-day grace period**. During those 3 days the account can only be restored by the support team. After that, recovery is impossible. You must type the organization name to confirm. Your subscription, if any, will **not** be automatically cancelled — cancel it separately to stop billing. Demo organizations cannot be deleted.
