Platform
Security
The sign-in and access policies that apply to everyone in a workspace, and the controls each person has on their own account. Workspace policies live under Settings → Workspace → Security & SSO and are managed by Owners and Admins; personal settings are under Settings → Security. What the tag does in the visitor's browser, and how data is hosted, is on the Technical reference.
At a glance
| Control | Scope | What it does |
|---|---|---|
| Single sign-on | Workspace | Google sign-in, with company domains whose verified users may join automatically. |
| Required MFA | Workspace | Every member must enrol an authenticator app within a grace period. |
| Network access | Workspace | Dashboard access only from listed IP addresses and ranges. |
| Data & privacy | Workspace | Whether anonymised data may be used to improve DynaMeet. |
| DynaMeet Support access | Workspace | Whether, how much and for how long DynaMeet staff may open your workspace. |
| Activity log | Workspace | A year of settings changes, member updates and sign-ins, exportable as CSV. |
| Your own sign-in | Person | Password or Google, two-factor authentication, recovery codes. |
None of these controls touch the widget on your website. Visitors reach the chat, calendar and Library through public endpoints that are allowed before any sign-in; the policies here govern the dashboard only.
Single sign-on
Let people at your workspace's verified company domains sign in with Google and join automatically, no invitation needed. Google Workspace is the only provider.
Required MFA
Require MFA for all team members starts a grace period of 7, 14 or 30 days (14 by default). Members who have not enrolled by the end of it are blocked until they do. Changes take effect immediately, and each member's status, Enrolled, Not enrolled or In grace period, is on the Members page.
- The admin enrols first. To manage the team's MFA policy you must have MFA on your own account, so that the policy itself is protected by MFA; changes ask for a fresh code.
- What members see. During the grace period, a banner: Your team requires two-factor authentication. You have N days remaining to enroll. After it, the enrolment page, until they finish. A member cannot switch their own MFA off while the workspace requires it.
- Method. An authenticator app (TOTP): scan the QR code or enter the key, confirm with a 6-digit code. There is no SMS option. Ten single-use recovery codes are issued at enrolment and can be regenerated, which invalidates the old ones. Recovery codes do not reset a password.
- Google sign-in. A member who signs in with Google satisfies the requirement through Google's own 2-Step Verification, so enforce it there as well.
- Reset. An Admin's Reset MFA on a member removes their authenticator and signs them out of every session; they enrol again at the next sign-in. Remind to enroll sends a nudge.
Network access
Limit access to the workspace to a list of trusted IP addresses. Other workspaces the same people belong to are not affected, and neither is the widget on your site.
10.0.0.0/8 or 2001:db8::/32, each with an optional label. Entries are matched per address family, so an office that reaches the dashboard over both IPv4 and IPv6 needs both listed.Data & privacy
Use this team's data to help improve DynaMeet. When on, data collected through your use of DynaMeet, including visitor activity and conversations, may be reviewed for quality and used in anonymised, statistically processed form to improve the product, which may include AI models, as described in the Terms of Service. The switch only controls that improvement use; it does not change how DynaMeet works for your own team. Turning it off applies going forward.
DynaMeet Support access
On the Members page. Off by default: No one at DynaMeet can open this workspace. Turn it on when you want the support team to look at your setup with you, and choose what they may do and for how long. Every time a support member opens your workspace it is recorded in your activity log.
| Setting | Options |
|---|---|
| Access level | View only: look at your setup and tell you what to change. View and edit: make the changes for you. Full access: also invite and manage your team members. Never billing, and never deleting the team. |
| Duration | 24 hours, 7 days (preselected), 30 days, or until you turn it off. With an end date, access ends automatically and any support member still in the workspace is removed then; without one, each support member is removed 7 days after they join. |
| Turning it off | Removes support members right away. Turning it back on does not re-add anyone. |
Activity log
Settings → Activity log tracks all changes made to your workspace's settings and membership, and is open to every role. Entries are kept for one year.
- What is recorded: settings changes with the before and after values, member and invitation changes, role changes, sign-ins with IP address, device, location and sign-in method, Support access being turned on, changed or ended, and support sessions starting and ending.
- Filters: search by email, action or description; last 24 hours, 7 days, 30 days or all time; My activity; and the types Settings, Team, Member, Authentication and Download Center.
- Export: Download CSV exports every entry matching the filters, up to 10,000 rows.
Your own sign-in
There is no session-timeout setting and no "sign out everywhere" button; an MFA reset by an Admin is the one action that ends all of a member's sessions.
Hosting and certifications
- The service and all stored customer data live in the AWS Tokyo region (ap-northeast-1), encrypted in transit (TLS) and at rest. AI responses are generated by a model provider whose requests may be processed outside Japan.
- ISO/IEC 27001:2022 and ISO/IEC 27017:2015 certified, with regular vulnerability assessments.
- The DPA, the sub-processor list and the security whitepaper are published at dynameet.ai/en/security. Details of what the tag collects are under Data & security.
Troubleshooting
| Symptom | Likely cause | What to do |
|---|---|---|
| A colleague's Google sign-in says their account isn't set up | Their domain is not on the SSO allow-list, or SSO is off | Add the domain, or invite them by email. |
| Google sign-in asks which team to join | The domain is allow-listed by more than one workspace | Invite them by email from the right workspace. |
| The MFA switch is disabled for you | You have not enrolled MFA on your own account | Enable my MFA first. |
| A member lost their phone | No authenticator and no recovery codes | An Admin uses Reset MFA; the member enrols again at sign-in. |
| Everyone is locked out after enabling network restriction | The office address was mistyped or only one address family was listed | Contact DynaMeet support; there is no in-app recovery. Next time, use Add my current IP and list both IPv4 and IPv6. |
| Someone is blocked from home or a phone | Their network is not on the list | Add their range, or have them use the office VPN. |
| The widget stopped after enabling network restriction | It should not: the restriction covers the dashboard only | Look for another cause under Installation → Troubleshooting. |
| Support access ended by itself | The duration you chose elapsed | Expected; turn it on again if you still need help. |
Frequently asked questions
Can we require Google sign-in for everyone?
Not as a switch. Enable SSO for your domain and let members link Google; password sign-in is then off for each linked account. Members who never link keep their password.
Does required MFA cover members who sign in with Google?
A Google sign-in counts as satisfying it, relying on Google's 2-Step Verification. Enforce 2-Step Verification in Google Workspace for the same assurance.
Does the IP restriction affect our website visitors?
No. It covers dashboard access for the workspace. The widget's public endpoints are unaffected.
Can DynaMeet staff see our data without asking?
No. Support access is off by default, you choose the level and duration, and every support session is in your activity log.
Is there a SAML or Okta integration?
Not today. Single sign-on is Google Workspace. Ask us if your identity provider is something else.
How long are activity logs kept, and can we export them?
One year, and yes: Download CSV exports the filtered entries, up to 10,000 rows.