Organization Settings

This is the help text the console shows in the help panel on this page.

Configure your organization’s profile, sign-in policy, and data management. Changes here affect your entire organization. Only Owners can change settings; other roles see tabs they are allowed to use, and the rest are hidden.

Identity Tab

Manage your organization’s display profile.

• Logo — Shown in the navigation bar and in generated reports. Accepted formats: PNG, JPG, GIF, WebP (max 5 MB). Click Upload Logo to replace the current logo, or Remove to revert to the auto-generated avatar.
• Organization Name — The display name shown across all platform views, reports, email notifications, and exported documents. Keep it short and recognizable.
• Country — The primary country of operations. Used in scope statement templates and regional compliance checks (e.g. GDPR applicability for EU-based organizations).
• Organization ID — Your immutable organization identifier, assigned at creation. Required when raising support tickets, configuring API integrations, or setting up webhooks.

Sign-In Policy Tab

Control how your team signs in. Single Sign-On requires The Growth plan or higher; choosing among the built-in methods works on every plan.

• Allowed Providers — The sign-in methods your team is offered: Email / Password, Google, GitHub, Microsoft and, once connected and Active, your own identity provider. At least one method must stay selected. Click Save to apply. Removing Email / Password asks you to confirm, because nobody could then sign in with a password — make sure everyone, including you, can sign in with the other method first. Non-Owners see the list read-only.
• Single Sign-On — Connect Google Workspace, Microsoft Entra ID, Okta, Generic OIDC or Generic SAML 2.0. A new connection is Pending until you run Test connection; then it becomes Active and can be selected under Allowed Providers. Copy the Redirect URI (or ACS URL and Entity ID for SAML) into your identity provider. Turn on Create accounts automatically on first sign-in to give new people the role you choose under Role for new accounts (Member, Contributor or Auditor).
• Your team’s sign-in link — Share this link with your team or add it to your intranet.
• Email domains — Optional. Leave it empty and anyone your identity provider authenticates can sign in. Add domains and only addresses at those domains can sign in to your organization.
• Restore email & password sign-in — Owners can use this button to bring password sign-in back if a sign-in change locked people out.

Export / Import Tab

Transfer organization data or create a point-in-time backup. Only Owners can use this tab.

• Export Data — Click Export… to download a .zip archive. It includes connected applications and the asset inventory, employee and personnel records, audit history and findings, policies, controls and compliance mappings, and custom tags and classification data. The following are not included: uploaded file attachments, user account credentials, organization logo and branding, billing and subscription information, and audit logs.
• Import Data — Click Import… to restore from a previously created export archive (.zip). Choose an import mode: All Data (Replace everything) or Lists Only (Assets & Employees). Importing overwrites existing data in this organization for the selected mode and cannot be undone — export your current data first if you need a rollback point.

Integrations Tab

Connect AutoCISO to external tools. Visible to Owners and Managers. See the Integrations help for the Jira setup steps.

Partner Access Tab

Allow a fractional CISO or partner firm to access and manage this organization on your behalf. Visible to Owners.

• Generate link — Creates an access link for your partner. Optionally enter an email under Bind to email (optional) so only that partner’s account can use it. A link expires after 7 days and the Owner can revoke it at any time.
• Pending invites and Connected — Links not yet used, and the partner currently connected. An organization can be managed by one partner firm at a time.
• Disconnect — Removes the partner’s access and deletes all partner-generated data (summaries, action items, reports). Your own organization data is not affected.

Danger Zone Tab

Irreversible actions that permanently affect your organization. Visible only to Owners.

• Delete Organization… — Immediately blocks all member logins and disables all platform functionality. All data (employees, assets, audits, policies, and settings) is permanently and irreversibly destroyed after a 3-day grace period. During those 3 days the account can only be restored by the support team. After that, recovery is impossible. You must type the organization name to confirm. Your subscription, if any, will not be automatically cancelled — cancel it separately to stop billing. Demo organizations cannot be deleted.