How to review organization access and security

Organization access is controlled through team roles and separate gestoría connections. Review both regularly.

Review team members

1. Select Team under Administration in the left navigation.
2. Check each member email, role, and status such as active or invited.
3. Change a role from the member row when responsibilities shift.
4. Remove members who no longer need access to the organization.

Understand roles

1. Viewer can review data but cannot edit most records.
2. Accountant can work with invoices, expenses, and clients within write permissions.
3. Admin can manage team members, settings, and billing.
4. Owner has full control, including sensitive organization settings.

Review external access

1. Open Gestorias to see connected accounting firms and pending invitations.
2. Use Manage access to confirm each firm still has only the modules it needs.
3. Revoke firm access when you change advisors or finish a collaboration.

Privacy and data controls

1. Open Settings and go to Data & privacy — see how to manage data and privacy settings.
2. Review communication consents and export organization data when you need an offline copy.
3. Keep admin access limited to people who should manage billing and legal settings.