Company settings
Maintain tenant identity, regional defaults, controlled email transport and sign-in protection policy. Changes are administrative controls, not changes to operational business data.
Screen orientation
Company administrators only. Sensitive security changes require the current administrator’s TOTP and apply the configured session-revocation control.
Sections separate company profile/defaults, email transport/template settings and sign-in protection. Review the active values before saving; unavailable settings are not implied by an empty field.
Field reference
The entries below describe the current screen controls and read-only values. They do not relax server-side validation, site scope, classification handling or required independence in a governed decision.
| Field or value | Control | Required or shown when | How to use or read it | Result |
|---|---|---|---|---|
| Company display name / Legal name | Text | Display name required; legal name required where the tenant legal identity is managed. | Use approved organisation identity. Do not put a customer/project name into tenant identity fields. | Updates customer-facing tenant presentation and controlled organisation metadata. |
| Timezone / Date format / Default currency | Select | Required tenant defaults. | Choose the operating defaults used for display and new records where no record-specific value applies. | Changes defaults only; retained historical records are not silently rewritten. |
| Default classification banner / Maximum external classification | Select | Required security handling configuration. | Set the approved tenant handling level. External classification remains a bounded external-delivery control, not a clearance grant. | Controls tenant presentation/eligibility boundaries. |
| SMTP host / Port / Transport security | Text, number and select | Required only when configuring approved email transport. | Enter approved infrastructure values via the protected administrative route. Never place credentials in support tickets or controlled documents. | Configures the service’s encrypted mail transport boundary. |
| Sender email / Sender name / Reply-to email | Text | Required when outbound email is enabled. | Use the authorised sender identity. A reply-to address must be owned/monitored by the organisation. | Controls system notification identity; it does not authorise arbitrary external campaigns. |
| Your current 6-digit authenticator code | One-time code | Required for sign-in protection policy changes. | Enter the active administrator’s current code only at confirmation time. Do not store or share it. | Authorises the security-sensitive policy change and session application. |
Actions and effects
When to use: After authorised profile/default values are reviewed.
What it does: Updates tenant configuration; it does not change existing stock, catalogue or workflow facts.
When to use: After approved mail configuration is saved.
What it does: Sends a controlled test to the chosen recipient; it does not enable a new external business workflow.
When to use: After current TOTP confirmation and explicit review.
What it does: Changes the company MFA policy and revokes active tenant sessions so the policy applies consistently.
Lists and states
- Settings summaries show active configuration values and any validation status. They are configuration records, not operational evidence or user clearance assignments.
Authority boundary
Company settings cannot create supplier/user business data, bypass platform administration, expose secrets, alter historic audits or grant an operational transaction authority.