Platform
Platform, security & admin
Multi-tenant isolation, roles, vault, branding, and platform control for operators.
What you get
Capabilities that ship with this module today.
Security & access
Invite-only access, group permissions, 2FA, audit log, and credentials vault.
- Admin / manager / accountant presets with page-level grants
- Optional TOTP and recovery codes
- Encrypted credentials vault and retenue de garantie controls
Workspace settings
Branding, banks, number series, catalogs, legal profile, and data tools.
- Logo, favicon, and workspace branding
- Bank comptes, conditions de paiement/methods, comptabilisation groups, exchange rates
- Legal entity, impôt profile, and exercice comptable start
Platform operations
Org control, job queue, encrypted backups, and subdomain hosting on Omnizone.
- Super-admin org and team administration
- Import job queue with cancel/retry
- Encrypted platform backups and `{slug}.omnizone.app` workspaces
Questions
Short answers up front. Expand for the longer version — the full text is in the page source either way.
How are workspaces isolated?Every row is org-scoped; roles gate pages and APIs per workspace.
Multi-tenant isolation is the default. A member of one company cannot read another company’s journals, files, or HR records through the product APIs.
Can operators back up a tenant?Yes — encrypted platform backups and structured org backup/restore.
Operators with the right access can schedule encrypted backups and restore a single organisation without rewinding every tenant on the shared database.
What authentication options exist?Invite-only access with optional TOTP and recovery codes.
Admin, manager, and accountant presets ship with page-level grants. Two-factor authentication is available when the workspace requires it.
Can we brand the workspace?Yes — logo, favicon, and workspace branding in settings.
Bank comptes, number series, catalogs, legal profile, and exercice comptable start live beside branding so go-live setup stays in one admin surface.
How do tenant subdomains work?Active workspaces serve on {slug}.omnizone.app.
Platform operations attach and verify workspace hostnames so each company opens on its own host while the shared cookie domain stays under Omnizone control.
Who runs platform operations?Super-admins — orgs, job queue, backups, and jurisdictions.
The platform layer is for operators: create organisations, watch the import queue, manage reserved subdomains, and apply statutory packs — not for day-to-day bookkeeping inside a tenant.
Ready to see it in your workspace?
Start a trial or create an compte. Book a walkthrough if you want a human on the call.