Roles, permissions, audit & 2FA
Who can see what, and who did what
Trade business software with two-factor authentication, role-based permissions on every action, a per-business audit trail, and passwordless sign-in with Google, Apple, Microsoft, an emailed code or link, or a passkey. Your data lives in your own storage container.
30-day free trial · No card required · Web app today, mobile & Windows apps in pilot
- Web Jetzt öffnenBeta
Demnächst
Demnächst
Demnächst
Security in TradeYoke is not a settings page; it is how the app is built. Every feature declares view, add, edit and delete permissions, and both the screen and the server check them. Roles bundle permissions and are given to team members. Two-factor sign-in works with Google or Microsoft Authenticator and an admin can require it for the whole business; because it is tied to you as a person rather than to one sign-in method, it stays in force whichever way you sign in: Google, Apple, Microsoft, an emailed code or link, or a passkey. A new account only switches on once its email address is confirmed. Changes to jobs, customers and money are written to an append-only audit trail. Nobody — not even an admin — can hand out more access than they hold themselves or edit their own roles, so a team member can never out-rank the person above them. And each business's data is stored in its own container, never mixed with anyone else's.
What it does
Roles, permissions, audit & 2FA in TradeYoke
Permissions on every action
View, add, edit, delete per feature; checked in the UI and on the server.
Roles
Bundle permissions into roles; give each team member one.
Two-factor authentication
Any TOTP authenticator app, checked whichever way you sign in; admins can require it business-wide and reset a locked-out user.
Sign in your way
Google, Apple, Microsoft, a six-digit code or one-tap link by email, or a passkey. TradeYoke has no passwords, so there is nothing to forget.
Audit trail
Who did what, when, on jobs, customers, quotes, invoices and payments; read-only and exportable.
Your own container
Each business's data in its own storage container, never mixed with anyone else's.
The real thing
As it looks today
A real screen from the product, not a mock-up. The same screen is on the phone app.
Every action, accounted for
View, add, edit, delete — and who did it
Invoiced, and often paid
The right person, the right access
Permissions on every action mean a new starter only sees what their role needs.
Access, set per role 
Job done, paperwork done too
Two-factor, any authenticator
Turn on two-factor sign-in for the whole team with any authenticator app.
Every edit, in the audit trail
Mehr davon, so wie es heute aussieht
The details
Also worth knowing
- Module switchesTurn features on or off per business; what is off is invisible and blocked by URL too.
- Crash logs you can seeErrors are captured with full detail into your business's own log, viewable by an admin.
- Encrypted in transit and at restAzure storage encryption and TLS everywhere.
- Nobody can out-rank the ownerA permission or role can never be handed out beyond what the person granting it already holds, nobody can edit their own roles, and only a Super Admin can change a Super Admin's access.
- Your account starts locked until you confirm itA new sign-up only switches on once you've clicked the confirmation link sent to that address, so nobody can start using an account against an email they don't control.
- Tightened with every releaseProtecting your customers' data is ongoing work, not a one-off. Each TradeYoke release tightens how the app guards sign-in, permissions and stored records, and version 0.3.0 continued that. The audit trail and role-based permissions above are the parts you can see and use.
- Delete your own accountUnder My account, Delete my account, anyone can delete their own login: the screen shows what will happen to each workspace, asks you to type DELETE, and asks for your two-factor code if you use one. A workspace you are the only owner of is closed and locked straight away and permanently deleted after 90 days; otherwise you simply leave it.
- Sign in with a passkeySign in with your face, fingerprint or device PIN: no password to type, no email to wait for. Sign in once with Google, Apple or Microsoft, add a passkey on the Passkey card under My account, and choose Use a passkey next time. If you use two-step sign-in, a passkey counts as the second step. We email you whenever a passkey is added or removed. Works in the web browser today; the Android, iPhone and Windows apps are coming shortly.
- No passwords: sign in with Google, Apple, Microsoft, a code or a passkeyTradeYoke has no passwords to remember, reuse or leak. Sign in with Google, Apple or Microsoft, with a six-digit code or one-tap link we email you, or with a passkey. Whichever you use, you land in the same account, with the same jobs, customers and role. The first time you use a new way in at an address that already has an account, a one-off emailed code proves it is you. Add or remove ways to sign in under My account, Ways to sign in; you can never remove the last one, so you cannot lock yourself out.
- Sign in on your phoneIn the TradeYoke app, Sign in continues on TradeYoke's secure sign-in page, with no password to type. The link in a confirmation email opens the app when it is installed.
- Safer sign-out and calendar linksSigning out everywhere now ends every session straight away, on every device. Shared calendar links expire after six months, and My account reminds you to make a new one before they do.
Questions
Asked about roles, permissions, audit & 2fa
Can I require 2FA for everyone?
Yes, from the business's security settings; an admin can also reset a user's 2FA.
Does two-factor authentication still apply if I sign in a different way?
Yes. Your 2FA enrolment belongs to you, not to one sign-in method, so it is checked and enforced whichever way you sign in: Google, Apple, Microsoft, an emailed code or link, or a passkey.
Can a team member give themselves more access?
No. A permission or role can never be handed out beyond what the person granting it already holds, and nobody can change their own roles.
Can a field worker see the money?
Only if their role says so. Permissions are per feature and per operation.
Where is my data held?
In Microsoft Azure, in a storage container that belongs to your business alone.
Can I delete my TradeYoke account myself?
Yes. Go to My account, then Delete my account, in the app or on the website. TradeYoke shows what will happen to each workspace, you type DELETE to confirm, and you enter your two-factor code if you use one. If you are the only owner, the workspace is closed and locked straight away and permanently deleted after 90 days; if it is shared with other owners, you just leave it. If you need a hand, email hello@tradeyoke.net.
How do I sign in to TradeYoke with a passkey?
Sign in once with Google, Apple or Microsoft, open My account, and on the Passkey card choose Add a passkey. After that, choose Use a passkey on the sign-in page and confirm with your face, fingerprint or device PIN. Removing a passkey is always allowed, and your other ways to sign in stay as they were.
Where do TradeYoke passkeys work, and will I be told if one is added?
Passkeys work today in the web browser; the Android, iPhone and Windows apps are coming shortly. TradeYoke emails you whenever a passkey is added or removed, so you hear about it if it was not you. If you use two-step sign-in, signing in with a passkey counts as the second step, so you are not asked for a code as well.
Does TradeYoke use passwords?
No. TradeYoke has no passwords. You sign in with Google, Apple or Microsoft, with a six-digit code or one-tap link emailed to you, or with a passkey, and they all lead to the same TradeYoke account. If you already use an address with TradeYoke and sign in with Google for the first time, TradeYoke emails you a one-off code to prove the address is yours, then connects Google to that account instead of starting a second one. TradeYoke never sees your Google, Apple or Microsoft password.
Can I sign in to the TradeYoke app?
Yes. In the TradeYoke app choose Sign in; it continues on TradeYoke's secure sign-in page, with no password to type. If you are new, you can start your free trial, and tapping the link in your confirmation email opens the app when it is installed.
What happens if I choose a passkey but there isn't one on my phone?
TradeYoke shows a clear message saying there is no passkey on this device and points you to your other ways to sign in, instead of a confusing system sheet.
How do I add or remove a way to sign in to TradeYoke?
Open My account and find Ways to sign in. It lists your email address and each of Google, Apple and Microsoft you have added, with Add and Remove buttons, a way to change your email address with a code sent to the new one, and Sign out everywhere. You can never remove your last way in, so you cannot lock yourself out. Changes need a recent sign-in with Google, Apple, Microsoft or a passkey rather than one that began with an emailed code or link. Passkeys are added and removed on the Passkey card on the same page.
Related: Team, projects, vehicles & suppliers · The platform · Pricing
See also: the Team & safety guide
See also: passkeys: signing in without a password
Try roles, permissions, audit & 2fa on your own work
30 days of Essentials free, no card. Import your customers and see it against a real week.