Security your security team can review
Workspaces are isolated by Postgres row-level security. Staff, partners and advertisers sign in with MFA; staff can use SSO; every change is in an audit log.
Capabilities
Everything included
Shipped and available today, in every plan unless the pricing page says otherwise.
Tenant isolation
Every workspace-owned table carries the workspace id and is protected by Postgres row-level security.
MFA with backup codes
TOTP for staff, partners and advertisers, with backup codes so a lost phone is not a support ticket.
SSO
SAML and OIDC with just-in-time provisioning, role mapping and allowed domains.
Custom roles
A permission matrix per role, and account managers limited to the partners and advertisers they manage.
Sign-in protection
Lockout after failed attempts, a new-browser sign-in email, session management and an admin IP allow-list.
Audit log
Who changed what and when, in the product and the API.
Privacy controls
Raw-data retention per workspace, device erasure requests and PII marking for lead fields.
How it works
Up and running in three steps
Turn on SSO
Your identity provider, your allowed domains.
Define roles
Start from built-in roles or build your own.
Require MFA
For staff, partners and advertisers.
Questions
Do you have SOC 2 or ISO 27001?
Not today. We do not claim certifications we do not hold. The security page describes the controls the product has.
Is SSO included?
SSO is part of the Scale plan.
Related features
Partner and advertiser portals
White-label portals on your domains for partners and advertisers.
Learn moreAPI and integrations
A public API for everything the portals do, an MCP server and ready integrations.
Learn moreReporting and analytics
One report engine, a report builder, raw data and BI connectors.
Learn moreSee Metrixed on your own traffic
Tell us what you run today. We will show you the same workflow in Metrixed, and set up a 14-day trial if it fits.
Monthly billing No setup fee Fraud prevention in every plan