Separate workspaces
Each organisation's data is isolated at the database level; one customer can never see another's.
Security
Your clients' work, kept private and on record.
Internal vs client-visible
Every epic, story, task, comment and piece of evidence is marked Internal or Customer Visible; clients see only what you share.
Multi-factor sign-in
Organisations can require MFA for all their users.
Separation of duties
The person who does the work cannot approve it, and nobody can approve their own submission.
Audit trail
Approvals, schedule changes and admin actions are logged with who, when and the reason.
Encrypted
Data is encrypted in transit (HTTPS) and at rest.