Security and access
When your customer’s IT team asks who can see what, the answers are here.
You decide how far your customers can see
Access comes in layers. You set a ceiling for each customer. The customer’s admins work beneath it, and employees see only their own orders, devices and cases.
ResellerVertex ITDecides for each customer what the customer may do itself
The reseller
Builds its own roles and sets a ceiling for each customer. Remove a permission from the ceiling and it is gone at once.
The customer admin
Manages their own users and roles within the ceiling. Never sees other customers, and never assortments, billing, workflows or bank connections.
The employee
Uses the shop: the assortment you chose, and their own orders, devices, agreements and repair cases.
Sign in with what the customer already uses
Single sign-on works with Microsoft Entra ID and Okta.
-
Microsoft Entra ID
Single sign-on plus user provisioning over SCIM for the back office and the shop. You connect your own directory or a customer’s, and the customer’s admin can set it up too. The platform updates access and department at each sign-in.
-
Okta
Single sign-on plus user provisioning over SCIM: create, update, deactivate and import. The customer’s own admin sets it up.
-
Two-factor sign-in
Each user can switch on codes from an authenticator app, with recovery codes. From then on, the user enters the code at every password sign-in. An admin can reset it.
-
MitID at checkout
A shop can require the employee to confirm the order with MitID before it is placed. It is switched on per shop.
Tools for personal data
You set the rules for when users are deleted, and you can see what was deleted.
- The platform deletes users automatically after inactivity, after deactivation, or if they were never activated. The default is 730 days, and you can change it.
- Minimum retention periods keep orders and cases for long enough.
- The platform logs every automatic deletion, and you can extract the log for reporting.
- Admins can erase a user straight away.
Whose name is on the screen
Your customers and their employees see your name. Only the partner portal carries Suppleo’s.
Under your name
- The shop
- The buyout and return pages
- Damage reporting
- Email and SMS
- The back office sign-in
Under Suppleo’s name
The partner portal, where workshops, return partners and insurers do their part of a case. It is in English.
AI stays off until you switch it on
AI is for your own staff only. Customers’ admins, their employees and partners cannot use it.
- You switch it on A user with account-settings rights accepts the AI terms for your organisation. The platform records the acceptance, and you can withdraw it.
- A person approves The assistant reads with the user’s own permissions and only proposes changes. It saves nothing until the user approves.
- Conversations expire The platform deletes conversations that are no longer in use.
- AI steps in workflows A workflow with an AI step must define a fallback. Once published, it runs without approval each time.
Questions about security?
Ask us in a demo or by email. We answer what your customer or your IT department wants to know.