Security & roles

Decide who can do what, and see who did it

Two-factor sign-in, a fresh code before voids, refunds and stock changes, role permissions you can tailor, and a log of who changed what.

In short

Security controls are part of every IntelliDrive OS account at $79/month. Anyone can turn on two-factor sign-in with an authenticator app; once it is on, voids, refunds, stock adjustments and pay changes ask for a fresh code.

Thirty-two role permissions and custom roles decide what each person can see and do. Staff see only the sales of the shops and vans they work at, and the audit log records who changed what.

If you run more than one legal company, each sale keeps the company that issued it.

How does it work, step by step?

  1. 1

    Turn on two-factor

    In Settings, Security, scan the QR code with an authenticator app, enter the code it shows, and keep the 8 backup codes somewhere safe.

  2. 2

    Set up roles

    In Settings, Roles, use the default for each base role or build a custom role from the 32 permissions.

  3. 3

    Assign people

    In Settings, Users, give each person a role and the shops or vans they work at.

  4. 4

    Check the audit log

    Open the Audit Log to see who did what and when, with the values before and after, filtered by record, action, person or date.

How does two-factor sign-in work?

In Settings, Security, scan the QR code with an authenticator app and enter the code it shows to turn two-factor on. You get 8 backup codes for when your phone is not with you. From then on, signing in asks for a code from the app as well as your password.

Which actions ask for a fresh code?

For anyone with two-factor turned on, these actions ask for a code entered within the last 5 minutes:

  • Voiding a sale or refunding one.
  • Editing a sale’s details or its payments after checkout.
  • Adjusting stock levels and deactivating a shop or van.
  • Reopening a closed register shift.
  • Changing pay rates and employee pay settings, adding or editing work locations, reviewing time corrections, and approving or locking timesheets.

What can roles control?

Every user has a base role: Owner, Admin, Dispatcher, Technician, Cashier or Accountant. Owners and admins always have every permission. For everyone else, use the defaults of their base role or build a custom role in Settings, Roles from 32 permissions.

The permissions cover, among others, selling, giving discounts and voiding sales; viewing or managing products and services; customers, statements and campaigns; inventory, counts, stock control, supplier pickups, preorders, quotes and appointments; reports, expenses and the audit log; settings, users and register shifts; and the time clock, timesheets, pay rates, work locations and payroll. Managing timesheets does not include seeing pay; pay rates and payroll reports have their own permissions.

Can staff see the sales of other shops?

No. Owners and admins see every sale. Everyone else sees the sales at the shops and vans assigned to them and the sales credited to them as cashier or technician. Any other sale does not exist for them: it is left out of every list, and opening it directly returns “not found”.

What does the audit log record?

Actions across IntelliDrive, such as sales, voids, refunds, settings changes and stock adjustments, are written to the audit log with who did it, when, and the values before and after. You can filter it by type of record, action, person and date range.

Pay rates, time corrections and payroll approvals are recorded in a separate, private workforce audit that only people with payroll permission can see.

How is the sign-in itself protected?

After three failed sign-in attempts, each further try needs a captcha check, and five failed attempts within an hour of each other lock the account for 15 minutes. Owners and admins are signed out after 30 minutes without activity and other staff after 60, with a one-minute warning first.

Customers’ card details are entered on your payment processor’s own checkout page or form, not stored in IntelliDrive.

Can I run more than one company under one login?

Yes. If you operate more than one legal entity, an owner or admin adds each one in Settings, Companies. One company is current at a time, and every sale, payment, invoice, expense and register shift keeps the company that issued it. Receipts and signed payment-link proof show the legal name of the company that issued that sale, and the main reports can be filtered by company.

What doesn't it do?

  • Two-factor sign-in is optional, and the fresh-code check applies only to people who have turned it on.
  • There is no SOC 2 report, PCI attestation or uptime guarantee. Our Terms describe the service as provided “as is”.
  • The audit log records changes; it is not a record of every screen someone looked at.

Frequently asked questions

Is two-factor sign-in required?

No, it is optional, and anyone can turn it on in Settings, Security with an authenticator app. Once it is on, signing in asks for a code, and voids, refunds, stock adjustments and pay changes ask for a fresh one.

How many permissions can a role have?

There are 32 permissions. Owners and admins always have all of them. For everyone else, use the default for their base role or build a custom role in Settings, Roles.

Can a technician see another van’s sales?

No. Staff see the sales at the shops and vans assigned to them and the sales credited to them. Owners and admins see every sale.

Does IntelliDrive keep an audit log?

Yes. It records who did what and when, with the values before and after, and you can filter it by record type, action, person and date.

Is IntelliDrive SOC 2 certified?

No. IntelliDrive has no SOC 2 report, PCI attestation or uptime guarantee. Customers’ card details are entered on your payment processor’s own checkout page or form, not stored in IntelliDrive.

Can I run two companies from one login?

Yes. Add each legal entity in Settings, Companies. Every sale, payment, invoice and expense keeps the company that issued it, so receipts and signed proof show the right legal name and the main reports can be filtered by company.

What does it cost?

Nothing extra. Two-factor sign-in, roles, the audit log and multiple companies are part of every IntelliDrive account at $79 a month per business, with unlimited users.

Ready to set up your team’s access?

30 days free. A card is required at signup and the first charge is on day 31. Cancel in Settings, Billing before then and you pay nothing.