Organization Settings

The Settings area is where owners and admins configure the organization. It's split into focused sections.

General

/settings — the basics:

• Organization name and slug (your dashboard URL; renaming the slug is a confirmed, one-way action)
• Timezone (preset list across US, EU, Asia, and Pacific)
• Your plan tier label and account type (Individual or Organization, which is convertible)
• A shortcut to billing & features

Branding

/settings/branding — make the dashboard yours:

• Upload a logo (drag-and-drop or file picker) with live preview
• Pick a primary brand color from a WCAG-safe palette or enter a custom hex

Privacy & data policy

/settings/privacy — GDPR-aligned controls:

• Data access — download a JSON export of your personal data (GDPR Art. 15/20)
• Consent records — Privacy Policy, Terms of Service, Marketing, and Data Processing, each with version and timestamp
• Logging level & PII masking — how much request data is retained and whether PII is redacted before storage (this is what Observability honors)

Security

/settings/security — protect access:

• Reset password
• Two-factor authentication (TOTP authenticator app) — enroll, name, and remove factors. See Two-Factor Authentication
• SSO configuration and SCIM tokens for enterprise provisioning
• Active sessions review
• Organization-wide require 2FA enforcement

Localization

/settings/localization:

• Locale (BCP 47) — 12 presets plus custom
• Currency (ISO 4217) — 8 presets with symbols
• Favicon upload
• Custom-domain CNAME instructions

Danger zone

/settings/danger-zone:

• Delete organization — irreversible. The org must have a single member (empty your team first), and you confirm by typing the org slug. After deletion you're returned to the sign-in page.

Most settings require owner or admin permission. Members and viewers see a read-only view.

Next steps

• Two-Factor Authentication — Set up MFA from Security
• Team Management — Invite members and assign roles
• Audit Log — Settings changes are recorded here