> ## Documentation Index
> Fetch the complete documentation index at: https://reedai-07fa30f1.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Organization Settings

> Configure organization-wide settings, policies, and preferences

## Organization Settings Overview

Organization settings apply across all projects and users in your ZeroTwo organization. These settings help you maintain consistency, security, and compliance across your team.

<Info>
  Organization settings are available on Team and Enterprise plans. They require Organization Admin permissions to modify.
</Info>

## Accessing Organization Settings

<Steps>
  <Step title="Open settings menu">
    Click your **profile avatar** in the top-right corner
  </Step>

  <Step title="Select Organization Settings">
    Click **Organization Settings** from the dropdown

    <Note>
      If you don't see this option, you may not have Admin permissions or may be on a plan without organization features.
    </Note>
  </Step>

  <Step title="Navigate settings sections">
    Use the sidebar to access different setting categories
  </Step>
</Steps>

## General Settings

Basic organization configuration.

### Organization Profile

<AccordionGroup>
  <Accordion title="Organization information">
    **Editable fields**:

    * **Organization Name**: Your company or team name
    * **Display Name**: How it appears to users
    * **Organization ID**: Unique identifier (read-only)
    * **Website**: Company website URL
    * **Industry**: Select your industry sector
    * **Company Size**: Team size range

    **Usage**:

    * Branding across the platform
    * Invoices and receipts
    * Support requests

    **Update**: Settings > General > Profile
  </Accordion>

  <Accordion title="Logo and branding">
    **Upload organization assets**:

    * **Logo**: Square image, 512x512px minimum
    * **Favicon**: 32x32px or 64x64px
    * **Brand Colors**: Primary and accent colors
    * **Theme**: Light, dark, or auto

    **Where it appears**:

    * Organization dashboard
    * Shared content pages
    * Email notifications
    * PDF exports
    * Client-facing pages

    <Tip>
      Use your brand colors for a consistent experience across ZeroTwo.
    </Tip>
  </Accordion>

  <Accordion title="Contact information">
    **Organization contacts**:

    * **Billing Contact**: Primary billing email
    * **Technical Contact**: IT/technical lead
    * **Support Contact**: For user support issues
    * **Admin Email**: Organization admin notifications

    **Notifications sent to these emails**:

    * Billing updates
    * Security alerts
    * Service announcements
    * Compliance reports
  </Accordion>
</AccordionGroup>

### Default Settings

Set organization-wide defaults:

<Tabs>
  <Tab title="AI Model Defaults">
    **Organization default model**:

    Choose the primary model for new users and projects:

    * GPT-4o (fast, versatile)
    * Claude 3.5 Sonnet (coding, analysis)
    * o1 (deep reasoning)
    * Gemini 2.0 Flash (quick responses)

    **Users can override** in their personal settings or per-project.

    **Why set defaults**:

    * Consistent experience for new users
    * Cost management
    * Performance optimization
    * Compliance requirements
  </Tab>

  <Tab title="Tool Defaults">
    **Enable/disable tools organization-wide**:

    **Core Tools**:

    * ✅ Canvas
    * ✅ Web Search
    * ✅ Code Interpreter
    * ✅ Image Generation
    * ❌ Video Generation (disabled by default)

    **Integrations**:

    * ✅ Google Drive
    * ✅ Gmail
    * ✅ GitHub
    * ❌ Gmail sending (view-only)

    Users can enable/disable in their projects if allowed.
  </Tab>

  <Tab title="Privacy Defaults">
    **Default privacy settings for new content**:

    * **New Projects**: Private, Team, or Organization visibility
    * **Conversations**: Private by default
    * **File Uploads**: Team access by default
    * **Share Links**: Disabled by default
    * **External Sharing**: Require approval

    **Recommendation**: Start restrictive, expand as needed.
  </Tab>

  <Tab title="Language & Region">
    **Organization localization**:

    * **Language**: Interface language
    * **Time Zone**: Organization time zone
    * **Date Format**: MM/DD/YYYY or DD/MM/YYYY
    * **Currency**: Billing currency
    * **Number Format**: Decimal separators

    **Affects**:

    * Timestamps
    * Billing
    * Reports
    * Exports
  </Tab>
</Tabs>

## Team Management

Manage users across your organization.

### User Provisioning

<AccordionGroup>
  <Accordion title="Adding users">
    **Bulk user management**:

    <Steps>
      <Step title="Navigate to Users">
        Organization Settings > Users
      </Step>

      <Step title="Invite users">
        **Single**: Click **Invite User**, enter email

        **Bulk**: Click **Bulk Invite**, upload CSV:

        ```csv theme={null}
        email,name,role,department
        john@company.com,John Doe,member,Engineering
        jane@company.com,Jane Smith,admin,Product
        ```
      </Step>

      <Step title="Set default role">
        Choose role for new users:

        * Member (default)
        * Admin
        * Custom role
      </Step>

      <Step title="Send invitations">
        Users receive welcome email with setup instructions
      </Step>
    </Steps>
  </Accordion>

  <Accordion title="User roles">
    **Organization-level roles**:

    **Organization Owner**:

    * Full control
    * Manage billing
    * Delete organization
    * Transfer ownership

    **Organization Admin**:

    * Manage settings
    * Add/remove users
    * Access all projects
    * Cannot delete organization

    **Member**:

    * Access assigned projects
    * Create personal projects
    * Standard features

    **Guest** (Enterprise):

    * Limited, temporary access
    * Specific project only
    * No account creation
  </Accordion>

  <Accordion title="Departments & groups">
    **Organize users** (Enterprise):

    Create departments for better management:

    * Engineering
    * Product
    * Marketing
    * Sales
    * Support

    **Benefits**:

    * Bulk project assignment
    * Department-specific settings
    * Usage analytics by department
    * Cost allocation

    **Setup**: Organization Settings > Departments
  </Accordion>

  <Accordion title="Offboarding users">
    **Remove users properly**:

    <Steps>
      <Step title="Select user">
        Organization Settings > Users > Select user
      </Step>

      <Step title="Choose action">
        **Deactivate**: Suspend access, keep data

        **Remove**: Remove from organization

        **Transfer**: Reassign their content first
      </Step>

      <Step title="Transfer content">
        Assign user's projects and conversations to another user
      </Step>

      <Step title="Confirm removal">
        User loses access immediately
      </Step>
    </Steps>

    <Warning>
      Deactivated users still count toward your license limit unless removed.
    </Warning>
  </Accordion>
</AccordionGroup>

## Security Settings

Organization-wide security controls.

### Authentication

<Tabs>
  <Tab title="Password Policy">
    **Enforce password requirements**:

    **Minimum Requirements**:

    * Length: 8-32 characters
    * Uppercase letters: Required
    * Lowercase letters: Required
    * Numbers: Required
    * Special characters: Optional
    * Password expiration: 90 days
    * Password reuse: Last 5 passwords

    **Additional Options**:

    * ✅ Prevent common passwords
    * ✅ Require complexity check
    * ✅ Force password change on first login
    * ❌ Allow password managers only

    **Configuration**: Settings > Security > Password Policy
  </Tab>

  <Tab title="Two-Factor Authentication">
    **2FA requirements**:

    **Policy Options**:

    * **Optional**: Users can enable (default)
    * **Encouraged**: Prompt users to enable
    * **Required for Admins**: Admins must have 2FA
    * **Required for All**: Everyone must have 2FA

    **Supported Methods**:

    * Authenticator apps (Google, Authy, 1Password)
    * SMS (not recommended)
    * Hardware keys (YubiKey, Titan)
    * Backup codes

    **Grace Period**: Give users time to set up (7-30 days)

    <Tip>
      Require 2FA for all admins at minimum, organization-wide for best security.
    </Tip>
  </Tab>

  <Tab title="Single Sign-On (SSO)">
    **Enterprise authentication** (Enterprise only):

    **Supported Providers**:

    * Google Workspace
    * Microsoft Azure AD
    * Okta
    * Auth0
    * OneLogin
    * Custom SAML 2.0

    **Configuration**:

    <Steps>
      <Step title="Choose provider">
        Settings > Security > SSO > Select provider
      </Step>

      <Step title="Enter credentials">
        Provide SSO configuration details
      </Step>

      <Step title="Test connection">
        Verify SSO works correctly
      </Step>

      <Step title="Enable">
        Enforce SSO for organization
      </Step>
    </Steps>

    **Options**:

    * Required for all users
    * Optional (allow password login)
    * Just-in-time provisioning
    * SCIM user sync
  </Tab>

  <Tab title="Session Management">
    **Control user sessions**:

    **Session Settings**:

    * **Timeout**: 2 hours to 30 days
    * **Concurrent sessions**: 1-10 devices
    * **Remember me**: 7-90 days
    * **Require re-auth**: For sensitive actions

    **Force logout**:

    * All users
    * Specific user
    * All sessions on device change
    * After password change

    **View active sessions**: Settings > Security > Sessions
  </Tab>
</Tabs>

### Data Protection

<AccordionGroup>
  <Accordion title="Data encryption">
    **Encryption standards**:

    **At Rest**:

    * AES-256 encryption
    * Encrypted database
    * Encrypted file storage
    * Encrypted backups

    **In Transit**:

    * TLS 1.3
    * HTTPS enforced
    * Secure WebSockets
    * Certificate pinning

    **Key Management**:

    * Automatic key rotation
    * Separate keys per organization
    * Hardware security modules (Enterprise)

    <Info>
      Encryption is always enabled and cannot be disabled.
    </Info>
  </Accordion>

  <Accordion title="Data retention">
    **Configure data lifecycle** (Enterprise):

    **Retention Policies**:

    * Conversations: 30 days to forever
    * Files: 30 days to forever
    * Logs: 30 days to 7 years
    * Deleted items: 0-90 days before permanent deletion

    **Auto-deletion**:

    * Delete after inactivity period
    * Delete when project archived
    * Delete on user removal

    **Compliance presets**:

    * GDPR (varies by data type)
    * HIPAA (6 years)
    * SOC 2 (as required)
    * Custom policy

    **Configuration**: Settings > Security > Data Retention
  </Accordion>

  <Accordion title="Access controls">
    **Restrict access**:

    **IP Allowlisting** (Enterprise):

    * Allow only specific IP ranges
    * Block all other access
    * Separate lists for users/admins

    **Location Restrictions**:

    * Allow/block by country
    * Geo-fencing rules
    * VPN requirements

    **Device Management**:

    * Trusted devices only
    * Require device approval
    * Block mobile (optional)
    * Block specific browsers

    **Time-based Access**:

    * Business hours only
    * Weekend restrictions
    * Holiday lockdown
  </Accordion>

  <Accordion title="Audit logging">
    **Track all security events** (Enterprise):

    **Logged Events**:

    * Login/logout
    * Failed login attempts
    * Permission changes
    * Settings modifications
    * Data access
    * Data exports
    * Share link creation
    * User additions/removals

    **Log Retention**: 1-7 years

    **Export Logs**: CSV, JSON, SIEM integration

    **Real-time Alerts**:

    * Failed logins (threshold)
    * Permission escalations
    * Bulk data exports
    * Unusual access patterns

    **Access**: Settings > Security > Audit Logs
  </Accordion>
</AccordionGroup>

## Compliance & Privacy

Meet regulatory requirements.

<Tabs>
  <Tab title="GDPR Compliance">
    **European data protection**:

    **Features**:

    * Data processing agreements
    * Right to access (user data export)
    * Right to erasure (account deletion)
    * Data portability
    * Consent management
    * Data breach notifications

    **Configuration**:

    * Enable GDPR mode
    * Set data retention limits
    * Configure consent flows
    * Designate DPO contact

    **User Rights Management**:
    Users can request:

    * Data export
    * Data deletion
    * Consent withdrawal

    **Response time**: 30 days
  </Tab>

  <Tab title="HIPAA Compliance">
    **Healthcare data protection** (Enterprise):

    **Requirements**:

    * ✅ Business Associate Agreement (BAA)
    * ✅ Encrypted communications
    * ✅ Audit logs
    * ✅ Access controls
    * ✅ Data backups
    * ✅ Incident response

    **Enable HIPAA Mode**:
    Settings > Compliance > HIPAA

    **Additional Controls**:

    * PHI handling restrictions
    * Minimum necessary access
    * Automatic log reviews
    * Enhanced encryption

    <Warning>
      Contact sales for BAA before processing PHI.
    </Warning>
  </Tab>

  <Tab title="SOC 2">
    **Security controls** (Enterprise):

    **Type II Controls**:

    * Security
    * Availability
    * Processing integrity
    * Confidentiality
    * Privacy

    **Compliance Features**:

    * Continuous monitoring
    * Change management
    * Vendor management
    * Risk assessments
    * Quarterly reviews

    **Reports**: Annual SOC 2 reports available
  </Tab>

  <Tab title="Custom Policies">
    **Organization-specific compliance**:

    Create custom compliance policies:

    <Steps>
      <Step title="Define policy">
        Name, description, requirements
      </Step>

      <Step title="Set controls">
        Choose applicable controls
      </Step>

      <Step title="Assign enforcement">
        Which projects/users must comply
      </Step>

      <Step title="Monitor compliance">
        Dashboard shows compliance status
      </Step>
    </Steps>

    **Examples**:

    * Internal security policy
    * Industry-specific requirements
    * Client-mandated controls
  </Tab>
</Tabs>

## Usage & Billing

Manage organization subscription and usage.

### Subscription Management

<AccordionGroup>
  <Accordion title="Plan details">
    **Current subscription**:

    **View**:

    * Plan name and tier
    * Monthly/annual billing
    * Seat count
    * Feature inclusions
    * Renewal date
    * Payment status

    **Actions**:

    * Upgrade/downgrade
    * Add seats
    * Change billing cycle
    * Update payment method

    **Location**: Settings > Billing > Subscription
  </Accordion>

  <Accordion title="Usage analytics">
    **Track consumption**:

    **Metrics**:

    * API calls by model
    * Token usage
    * File storage
    * Active users
    * Project count
    * Tool usage

    **Filters**:

    * By time period
    * By department
    * By project
    * By user
    * By model/tool

    **Exports**: CSV, PDF reports

    **Alerts**: Set usage thresholds
  </Accordion>

  <Accordion title="Cost allocation">
    **Budget tracking** (Enterprise):

    **Allocate costs**:

    * By department
    * By project
    * By cost center
    * Custom tags

    **Reports**:

    * Monthly cost breakdowns
    * Trend analysis
    * Budget vs. actual
    * Forecasting

    **Chargebacks**: Invoice internal departments
  </Accordion>

  <Accordion title="Payment methods">
    **Manage payment**:

    **Accepted Methods**:

    * Credit/debit cards
    * ACH (US)
    * Wire transfer (Enterprise)
    * Purchase orders (Enterprise)

    **Multiple Cards**: Add backup payment methods

    **Invoicing**: Monthly consolidated invoices

    **Update**: Settings > Billing > Payment Methods
  </Accordion>
</AccordionGroup>

## Integrations Management

Configure organization-wide integrations.

### OAuth Integrations

<Tabs>
  <Tab title="Google Workspace">
    **Connect organization Google Workspace**:

    **Features**:

    * Domain-wide delegation
    * All users can connect
    * Centralized permissions
    * Admin controls

    **Setup**:

    <Steps>
      <Step title="Admin console">
        Settings > Integrations > Google Workspace
      </Step>

      <Step title="Authorize">
        Sign in with Workspace admin account
      </Step>

      <Step title="Configure scopes">
        Select which Google services to enable:

        * Gmail
        * Drive
        * Calendar
        * Contacts
      </Step>

      <Step title="Apply to users">
        All organization users can now connect
      </Step>
    </Steps>
  </Tab>

  <Tab title="GitHub">
    **Organization GitHub integration**:

    **OAuth App** or **GitHub App**

    **Permissions**:

    * Read repositories
    * Read issues/PRs
    * Write comments (optional)
    * Create branches (optional)

    **Restrict access**:

    * Specific repositories only
    * Read-only
    * Per-user authorization
  </Tab>

  <Tab title="Slack/Teams">
    **Team communication platforms**:

    **Slack**:

    * Workspace-level connection
    * Bot installation
    * Channel permissions
    * Slash commands

    **Microsoft Teams**:

    * Tenant-level connection
    * Teams app installation
    * Channel access
    * Command integration
  </Tab>

  <Tab title="Custom Integrations">
    **Build your own** (Enterprise):

    **API Access**:

    * Generate organization API keys
    * OAuth 2.0 apps
    * Webhooks
    * Custom MCP servers

    **Documentation**: API docs for integration guides
  </Tab>
</Tabs>

## API & Developer Settings

Configure developer access (Enterprise).

<AccordionGroup>
  <Accordion title="API keys">
    **Organization API access**:

    **Key Types**:

    * **Admin Keys**: Full organization access
    * **Service Keys**: Specific services only
    * **User Keys**: Per-user delegation

    **Create Keys**:

    <Steps>
      <Step title="Generate key">
        Settings > API > Create API Key
      </Step>

      <Step title="Set permissions">
        Read, write, admin scopes
      </Step>

      <Step title="Set expiration">
        30 days to never
      </Step>

      <Step title="Save securely">
        Key shown once, store safely
      </Step>
    </Steps>

    **Security**:

    * Rotate keys regularly
    * IP restrictions
    * Rate limiting
    * Activity monitoring
  </Accordion>

  <Accordion title="Webhooks">
    **Event notifications**:

    **Available Events**:

    * User created/updated/deleted
    * Project created/archived
    * Conversation created/shared
    * File uploaded
    * Integration connected
    * Usage thresholds

    **Configuration**:

    * Webhook URL
    * Secret for verification
    * Event selection
    * Retry policy

    **Testing**: Send test payloads
  </Accordion>

  <Accordion title="Rate limits">
    **API throttling**:

    **Default Limits**:

    * 1000 requests/hour per key
    * 100 requests/minute per IP
    * 10,000 requests/day per org

    **Increase Limits**: Contact sales for higher limits

    **Monitor**: Real-time usage dashboard
  </Accordion>
</AccordionGroup>

## Notification Settings

Configure organization-wide notifications.

<Tabs>
  <Tab title="Email Notifications">
    **Organization email preferences**:

    **Admin Notifications**:

    * User activity alerts
    * Security incidents
    * Billing updates
    * Usage warnings
    * Compliance reports

    **User Notifications**:

    * Allow users to configure
    * Force certain notifications
    * Disable specific types

    **Frequency**:

    * Real-time
    * Daily digest
    * Weekly summary
  </Tab>

  <Tab title="In-App Notifications">
    **Platform notifications**:

    **Enable/Disable**:

    * Mentions
    * Shares
    * Comments
    * Assignments
    * Updates

    **Notification Center**: View all notifications
  </Tab>

  <Tab title="Slack/Teams">
    **Send notifications to chat**:

    **Channel Notifications**:

    * New user joined
    * Project created
    * Important updates
    * Alerts and warnings

    **Personal Notifications**:

    * @mentions
    * Direct shares
    * Assignments
  </Tab>
</Tabs>

## Advanced Settings

Enterprise-level configuration.

### White-Label (Enterprise)

**Custom branding**:

* Custom domain (docs.yourcompany.com)
* Remove ZeroTwo branding
* Custom email domain
* Custom support links
* Custom help documentation

### Custom Models

**Bring your own models**:

* Azure OpenAI
* AWS Bedrock
* Self-hosted models
* Custom API endpoints

**Configuration**: Settings > Advanced > Custom Models

### Data Residency (Enterprise)

**Control data location**:

* US (default)
* EU
* UK
* Canada
* Australia
* Custom region

**Affects**: All data storage and processing

## Next Steps

<CardGroup cols={2}>
  <Card title="Invite Members" icon="user-plus" href="/projects/invite-and-members">
    Add team members to your organization
  </Card>

  <Card title="Security & Privacy" icon="shield" href="/privacy/data-and-compliance">
    Learn about data protection
  </Card>

  <Card title="Roles & Permissions" icon="lock" href="/projects/roles-and-permissions">
    Configure access controls
  </Card>

  <Card title="Usage & Billing" icon="credit-card" href="/account/org-billing">
    Manage organization billing
  </Card>
</CardGroup>

<Check>
  Proper organization settings ensure security, compliance, and consistency across your team!
</Check>