All features
Invitations & access
Administrators invite by name; sign-in is passwordless
Access is invitation-only. An administrator enters the person's full name as it should appear in the record and sends the invitation to their email.
- Only an administrator can invite into an organization
- Full name entered by the administrator, not self-chosen
- One-time code sign-in — no passwords stored anywhere
- Access removed from the roster in one step
- Unknown addresses never reveal whether an account exists
Why the administrator sets the name
The roster is a governance document. Letting members choose their own display name invites inconsistency in the minutes and, worse, impersonation of an officer. The administrator controls how each person appears.
No password to steal
There is no password database, so there is nothing to breach, reuse, or reset. Each sign-in uses a fresh single-use code sent to the invited address.

