What changed, and what it means for you

A reorganised menu with five collapsible groups: Overview, Compliance management, Risk & assurance, Technology & integrations and Administration. Each person sees only the entries their role allows.

A Platform / Workspace switch for people who manage customers, so running customers and doing compliance work are kept apart.

A tabbed console: Organisations, Trial requests, Website enquiries, Email delivery and Create organisation. Trial requests and enquiries stay separate.

Search, a status filter and paging for organisations, with trial days left, end date, plan and seat limits in view. A Details button and an Actions menu replace the long row of buttons.

Extend a trial by 15, 30 or 45 days. A reason is required and is written to the audit log.

Suspending an organisation now asks for a reason and a confirmation.

A trial request from a colleague of an existing customer is flagged, so access can be added to the existing organisation instead of creating a second one.

Use a new phone or app: replace your authenticator yourself from Sessions & MFA, after proving it is you.

Administrators can revoke a colleague's authenticator if they lose their phone. The person registers a new one at their next sign-in.

New organisations get a clean company sign-in name made from their name, for example consultedge-global, instead of a name with a random ending.

Two organisations can no longer share a name by accident. Only the platform team can create a duplicate, after an explicit confirmation.

Confirming a sensitive action takes one code from your authenticator app when two-step sign-in is on. No password retyping, and a code works only once.

The set-up QR code is standard and sized for reliable scanning. It works with Microsoft Authenticator, Google Authenticator, Authy, 1Password and other authenticator apps.

Clearer messages when a code is rejected, and a hint if a code is typed into the password box.

Optional reputation check on uploads: only a file's fingerprint is looked up, never the file itself, and files already known to be malicious are refused.

The confirmation box no longer rejects a correct authenticator code that was typed into the wrong field without saying what went wrong.

A framework library with ISO/IEC 27001:2022, SOC 2, NIST CSF 2.0, CIS Controls 8.1 and the DPDP Act and Rules (India), with four separate statuses and coverage per requirement.

Automated checks with human review and sign-off, findings, remediation tasks, risk register and reports.

DPDP assessment workflow, consent notices and an append-only consent record.

Evidence upload with file-type, macro and script checks before a file is accepted.

Sign in by company name, email and password. Two-step sign-in with an authenticator app and recovery codes.

Work-email single sign-on with company domains, and idle sign-out after 10 minutes.

Free-trial requests from this website, an approval inbox and a welcome email with a one-time activation link.

Access passes with plan limits for people, frameworks and connected systems, for trials and production.

One-click Microsoft 365 connection by administrator consent, read-only.

Extra confirmation for sensitive actions, per-person sign-out, time-limited read-only support access that the customer approves, and offboarding with export.