Team roles and access control for client documents.

Invite colleagues by email and pick one of five roles. Reviewers review, case managers run requests, admins manage the firm, and the audit trail records who did what.

14-day free trial. No client accounts to set up.

Roles

What each role can do

RoleViewReviewRequestsTeamBilling
OwnerYesYesYesYesYes
AdminYesYesYesYesNo
Case managerYesYesYesNoNo
ReviewerYesYesNoNoNo
ViewerYesNoNoNoNo
Nobody can give someone more access than they have themselves.

Bring your team in

Everyone at your firm gets their own Sealio account, with one role in your firm.

  1. 1

    Invite by email

    Owners and Admins enter an address and choose a role. The invitation link works once and expires after 7 days.

  2. 2

    They accept

    Your colleague creates an account with the invited address, confirms it with a 6-digit code, and opens your firm’s workspace.

  3. 3

    Adjust as people change

    Change a role or remove a member from the Team page. They lose access at once, and their past work stays in the audit log.

Access that is checked everywhere

Permissions are enforced on the server for every action, and denied unless a role allows them.

Five roles
Owner (everything, including billing), Admin (everything except billing), Case manager (clients, checklists and requests), Reviewer (accepts, returns and downloads), Viewer (reads and downloads).
Pending invitations
See who has not joined yet. Resend issues a fresh link and cancels the old one; Cancel withdraws the invitation.
Two-factor sign-in
Each person can turn on an authenticator app with 10 backup codes, and see their recent sign-ins and failed attempts.
Several firms, kept apart
Someone who works with more than one firm sees a firm list, and each firm’s data stays completely separate.
Sessions that end
Sessions end after 12 hours without activity and always within 30 days.
Recorded in the audit log
Invitations, role changes and removals are written to the same tamper-evident trail as document decisions.

PlannedTeams inside a firm, letting a firm require two-factor sign-in for everyone, passkeys, and single sign-on for enterprise firms.

A firm of four, with four different jobs

A worked example with made-up names. Every step is something Sealio does today.

The owner of a small accounting firm invites three colleagues. Her senior accountant becomes an Admin, so he can manage the team and settings but not billing. The bookkeeper who runs client requests is a Case manager. A seasonal reviewer who only checks documents during tax season is a Reviewer: she can accept, return and download, and cannot create or send requests.

In May the reviewer’s contract ends and the owner removes her from the Team page. She loses access at once. Every decision she made stays in the audit log under her name.

Team & access: questions and answers

What roles does Sealio have?

Five: Owner, Admin, Case manager, Reviewer and Viewer. Owners can do everything including billing; Viewers can read and download documents.

Who can invite team members?

Owners and Admins. Nobody can give another person more access than they have themselves.

What happens when I remove someone?

They lose access to your firm immediately. Their past work stays in the audit log, and their Sealio account and any other firms they belong to are not affected.

Is two-factor sign-in available?

Yes. Each person can turn on two-factor sign-in with an authenticator app. Requiring it for a whole firm is planned.

Your next client is the last item on the list.

Start with a ready-made checklist or build your own, invite a client, and watch the stamps land.

4Your firm14-day free trial · English and French in CanadaStart my free trial Book a demo