Manage Security and Billing
Run an owner review of MFA policy, audit logging, access boundaries, subscription state, usage, and destructive controls.
Examine security and billing together, because subscription state can block writes. Current role behavior also gives Members access to plan operations. Run this review as a workspace owner. Record the controls that your organization uses to compensate.
1. Confirm Owner Continuity
Before you change policy or billing:
- Open the membership view.
- Confirm the intended owner accounts.
- Make sure that at least one other authorized recovery contact exists when continuity needs it.
- Remove stale membership only after the ownership is safe.
Do not delete an owner account or workspace while it is the only path to business records.
2. Check Personal MFA
Open Settings → Account → Security.
- Confirm that your active authenticator appears.
- Add a replacement factor before you retire an old device.
- Check the factor that you added with a six-digit code.
- Remove the old factor only after the replacement works.
The current add-device flow supports TOTP authenticator apps. It does not show passkeys or recovery codes.
3. Set the Future-Member MFA Rule
Open Settings → Security.
- Turn on Require MFA for New Members.
- Select Save.
- Record the activation date in your internal access procedure.
- Test with a membership that you create after that date.
The rule does not apply retroactively. Current members need a separate enrollment campaign and verification process.
4. Set the Audit Logging Policy
In the same page, open Audit & Logging.
- Confirm that Enable Audit Log is on. New workspaces start with it on.
- Select an Audit Log Retention period: 7, 30, 90, or 120 days. The default is 90 days.
- Select Save.
Eigenn records the actor, action, resource, result, duration, and source IP address for write operations. A nightly job deletes routine records after the retention period that you selected.
Eigenn always records changes to workspace settings, roles, membership, and directory sync, and keeps them for their longer compliance period. Your retention setting cannot delete those records early.
Eigenn caches the enable flag for up to five minutes, so a change is not immediate.
Session-timeout, IP-allowlist, data-retention, and customer-anonymization controls are no longer on this page. Enforce network and session restrictions at your identity provider, VPN, or proxy.
5. Check SSO and Organization State
Open Settings → Account → Organizations and select the relevant organization.
- Confirm the organization domain.
- Examine the identity-administration links that are available.
- Confirm SSO connections in the identity administration system.
- Test sign-in with a non-owner account.
The workspace Security page does not set up SSO. Organization administration is the supported identity path.
6. Reconcile Billing State
Open Settings → Billing.
- Compare Current Plan with the hosted billing portal.
- Check for a Cancelling badge.
- Select Manage billing.
- Confirm the payment method and the platform invoices.
- Compare order history with provider records.
- Record the intended renewal owner.
Local plan state can lag checkout or cancellation. Use the provider state before you buy again or promise continued paid access.
7. Control Who Can Change the Plan
Current billing permissions let Owners and Members do these actions:
- Start paid-plan checkout
- Open the hosted billing portal
- Schedule subscription cancellation by selecting Starter, the lowest plan
A Viewer cannot do those writes.
If plan changes need owner approval, do not use Member as a purely operational role without one more control. Examine the membership design with Manage Team Access.
8. Review Refund Requests
The Request a refund card lists the workspace's past requests and their status: Pending review, Approved, Refunded, Denied, or Failed.
Submitting a request records it for an Eigenn operator to review by hand. It does not move money. Confirm the terminal status before you treat a refund as settled.
Billing delegates were removed. Nothing read the delegate list and the reminder was never sent. Tell the person who owns billing through your normal channel.
9. Check Usage
Open Settings → Usage and compare:
- Seats
- Active bank connections
- Current-month Inbox items
- Current-month invoices
- Storage
Use detail CSV exports for evidence when the data looks credible.
If the usage query fails, the page states that usage data is temporarily unavailable. It does not substitute a plan name or zero counts. Reload the page, then compare Settings → Billing if the message stays.
10. Cancel a Subscription Safely
There is no free plan. To cancel, select Starter, the lowest plan. Eigenn asks for confirmation, then schedules cancellation at period end. An unpaid workspace stays on Starter with a non-active subscription status, which permits reads and blocks writes.
Before you confirm:
- Examine the paid features and quotas that the workspace uses.
- Export the necessary billing and operational records.
- Find the active workflows, webhooks, API keys, and connections.
- Communicate the effective date.
- Select Starter.
- Confirm the change.
- Check the cancellation in the hosted portal.
The local Current Plan card can stay paid until the provider synchronizes.
11. Review Destructive Controls
Delete account
This action deletes the user and any solely owned workspaces. It then queues external cleanup for those workspaces.
Delete team
Owner-only permanent deletion of the active workspace. Storage and connected-provider cleanup can continue asynchronously.
Remove custom email domain
Owner-only. Clears the workspace sender configuration and returns email to the default domain.
Remove bank connection
This action stops sync for that connection and changes usage. Check downstream reconciliation before you remove the connection.
Review Cadence
Run this review:
- Before you invite a new department
- After an owner or billing contact changes
- Before plan renewal or downgrade
- After an identity or payment incident
- Before you describe a Settings control in a compliance questionnaire
Troubleshoot
A Member changed billing unexpectedly
Current billing permissions let a Member make that change. Examine the role assignment and the provider-side billing access again. Then document an approval control.
An audit-logging change has no immediate effect
Eigenn caches the enable flag for up to five minutes. Security-sensitive events are always recorded, whatever the setting.
The cancellation badge does not appear
Open the hosted billing portal and compare provider state. Local cancellation data can lag.
Usage contradicts Billing
If Usage is unavailable, reload the page. If Usage and Billing still disagree, use Billing and the resource pages, then contact support.
A refund request has not changed status
An Eigenn operator reviews each request by hand. Submitting records the request; it does not issue a refund.