Security and compliance

Foral includes the security and compliance tools a European organisation needs: stronger authentication, a tamper-evident audit log, responses to data requests under the GDPR and encryption of your data. These options are configured in the Settings panel.

Two-step verification (MFA) and passkeys

Two-step verification adds a temporary code to sign-in, generated by an authenticator app (TOTP) such as Google Authenticator. On first setup, each person also receives recovery codes to use if they lose their phone.

In the System tab of Settings you can require MFA across the whole organisation:

  • Nobody — optional, each person decides.
  • Admins only — mandatory for people with administration roles.
  • Everyone — mandatory for everyone.

Anyone covered who does not have it yet is prompted to set it up at their next sign-in. As an alternative (or in addition), users can register passkeys — access keys tied to the device (fingerprint, face or PIN) that replace the password.

Password policies

Still in the System tab, you set the organisation’s password rules: minimum length, whether uppercase, lowercase, digits or symbols are required, and optional expiry. The rules apply everywhere a password is set.

Audit log

The Audit tab records administrative and security actions — sign-ins, role changes, suspensions, deletions and much more. You can filter by actor, action, module, outcome and period, and export to CSV.

GDPR export

To meet the rights of access and portability (Articles 15 and 20), you can generate a ZIP package with a user’s personal data — profile, Drive, notes, calendar, forms, plans and notifications. The package is prepared in the background; when it is ready you get a notification and can download it. Every export is recorded in the audit log.

Encryption and data separation

Each organisation is isolated from the others: one tenant’s data is never visible to another. Data at rest is encrypted, with key management in the Encryption tab.

Forwarding audit events to the company’s corporate SIEM and dedicated encryption key management (with your own Vault) are available on the Enterprise plan — see plans. Everything else on this page is included in every plan.