Organization Settings

Overview#

The configuration decisions made during initial platform deployment tend to persist long after the people who made them have moved on. The Organization Settings module makes those decisions visible, auditable, and reversible. From branding and security policies to feature flags and localization, every setting is versioned and changes propagate in real time across all systems without requiring a deployment.

Organisations operating internationally or across multiple departments get particular value from the hierarchical settings model, where defaults cascade down and overrides are captured at the appropriate level.

Key Features#

Branding and Visual Identity: Complete visual identity management including logos (primary, secondary, favicon, loading screen), colour schemes with accessibility validation, typography selection from 1,400+ fonts, layout customisation, and email template branding. Pre-configured professional themes are available for quick initial setup.
Custom Domains and White-Label: Configure custom domains for application access, email sending, and API endpoints with automatic SSL certificate provisioning. White-label mode enables complete rebranding including login pages, mobile app themes, PDF reports, and help documentation.
Feature Flags and Rollouts: Granular feature control with boolean toggles, percentage-based rollouts, user segment targeting, and time-based scheduling. Kill switches enable instant emergency feature disabling. A/B testing integration supports data-driven feature decisions without code deployments.
Localisation and Internationalisation: Multi-language support for 24+ languages with translation management workflows, regional date, time, and number formatting, multi-currency support with real-time exchange rates, right-to-left (RTL) layout support, and country-specific address formatting.
Security Policies: Configure password requirements, session timeouts, IP allowlisting and blocklisting, MFA enforcement, and data encryption preferences from a centralised security settings panel. Policies apply to all users in the organisation by default.
Notification Preferences: Manage notification channels (email, SMS, push, in-app) per event type, configure digest frequency, set quiet hours, and control notification routing for the organisation.
Integration Settings: Manage API keys, webhook endpoints, OAuth client configurations, third-party service connections, SSO provider settings, and data synchronisation schedules.
Compliance and Audit Settings: Configure data retention periods, audit log retention, privacy compliance toggles (GDPR, CCPA), legal disclaimers, and terms of service management.
Configuration Version Control: All settings changes are versioned with rollback capability. Real-time propagation ensures changes take effect across all systems within seconds of being saved.

Use Cases#

Brand consistency by centralising all visual identity settings and ensuring consistent presentation across every user touchpoint.
Global operations with multi-language, multi-currency, and regional formatting support for teams working across different jurisdictions.
Controlled feature releases using percentage rollouts, user segment targeting, and A/B testing to deploy new capabilities safely.
White-label deployments for managed service providers and systems integrators presenting the platform under their own brand.
Operational governance with centralised security policies, notification management, and compliance configuration that applies consistently across all users.

Open Standards#

OAuth 2.0 (RFC 6749): The Integration Settings panel manages OAuth 2.0 client configurations, enabling organisations to register third-party service connections and API authorisation flows that use the standard authorisation-code and client-credentials grants.
OpenID Connect (OIDC) / OpenID Connect Core 1.0: SSO provider settings are configured via OIDC, allowing the platform to federate identity from enterprise identity providers and resolve tenant context from domain-to-tenant bootstrap queries.
SCIM 2.0 (RFC 7643 / RFC 7644): Organisation settings control SCIM provisioning connections, synchronising users and groups from external directories into the platform using the System for Cross-domain Identity Management protocol.
LDAP (RFC 4511): The Security Policies panel accepts LDAP and LDAPS server URLs and base-DN configuration for directory-backed authentication, with URL-scheme validation enforcing RFC 4511 connection semantics.
X.509 Public Key Infrastructure (RFC 5280): PKI trust settings accept PEM-encoded CA certificates for mutual TLS and client-certificate authentication; the platform validates certificate format on input before persisting to the tenant security configuration.
FIDO2 / Web Authentication (W3C WebAuthn Level 3): MFA enforcement settings govern the use of FIDO2 passkeys and hardware security keys through the platform's WebAuthn credential-management integration.
GDPR (EU Regulation 2016/679) / NIS2 (EU Directive 2022/2555) / eIDAS (EU Regulation 910/2014): The Compliance and Audit Settings panel exposes per-tenant toggles for each of these EU regulatory frameworks, controlling data-retention periods, audit-log retention, and privacy-compliance behaviour.

Getting Started#

Configure Branding: Upload logos, set colours, and choose typography to match your brand identity.
Enable Features: Review and toggle relevant feature flags for your organisation.
Set Localisation: Choose default language, date/time formats, currency, and enable additional languages as needed.
Review Security: Configure password policies, session settings, and MFA enforcement.
Set Up Notifications: Configure notification channels and preferences for your team.

Availability#

Enterprise Plan: Included (all settings, white-label, multi-language, A/B testing)
Professional Plan: Core settings included; white-label, advanced feature flags, and A/B testing available as add-on

Last Reviewed: 2026-02-05 Last Updated: 2026-04-14