> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tiro.ooo/llms.txt
> Use this file to discover all available pages before exploring further.
# Organization Security
> SSO sign-in, IP access restrictions, personal data masking, and share link controls. Configure your workspace to meet your organization's security requirements.
export const PlanGateCard = ({plan, page, lang = "ko", children}) => {
const BADGE = {
pro: {
ko: "Pro+",
en: "Pro+",
ja: "Pro+"
},
team: {
ko: "팀 플랜",
en: "Team Plan",
ja: "チームプラン"
},
enterprise: {
ko: "엔터프라이즈",
en: "Enterprise",
ja: "エンタープライズ"
}
};
const COPY = {
pro: {
ko: {
lead: "이 기능은 Pro 플랜 이상에 포함되어 있어요.",
tail: "지금 쓰는 워크스페이스에서 바로 업그레이드할 수 있어요.",
cta: "플랜 업그레이드하기"
},
en: {
lead: "This feature is included in Pro plans and above.",
tail: "You can upgrade right from your workspace.",
cta: "Upgrade your plan"
},
ja: {
lead: "この機能はProプラン以上でご利用いただけます。",
tail: "ワークスペースからすぐにアップグレードできます。",
cta: "プランをアップグレード"
}
},
team: {
ko: {
lead: "이 기능은 함께 쓰는 워크스페이스에서 진가가 나와요.",
tail: "팀원을 초대하면 바로 시작할 수 있어요.",
cta: "팀원 초대하기"
},
en: {
lead: "This feature shines in a shared workspace.",
tail: "Invite your teammates to get started.",
cta: "Invite teammates"
},
ja: {
lead: "この機能はチームで使うワークスペースで真価を発揮します。",
tail: "メンバーを招待してすぐに始められます。",
cta: "メンバーを招待"
}
},
enterprise: {
ko: {
lead: "이 기능은 엔터프라이즈 플랜에서 제공돼요.",
tail: "조직에 필요한 보안 구성을 영업팀이 함께 설계해 드려요.",
cta: "도입 문의하기"
},
en: {
lead: "This feature is available on the Enterprise plan.",
tail: "Our sales team will help design the security setup your organization needs.",
cta: "Contact sales"
},
ja: {
lead: "この機能はエンタープライズプランでご利用いただけます。",
tail: "組織に必要なセキュリティ構成を営業チームがご支援します。",
cta: "導入のお問い合わせ"
}
}
};
const HREF = {
pro: "https://tiro.ooo/" + lang + "/n?utm_source=docs&utm_medium=plan_callout&utm_campaign=plan_upsell_pro&utm_content=" + page + "#settings/plans",
team: "https://tiro.ooo/" + lang + "/n?utm_source=docs&utm_medium=plan_callout&utm_campaign=plan_upsell_team&utm_content=" + page + "#settings/plans",
enterprise: "https://relate.so/forms/yr14ayb1s9zdkuru?utm_source=docs&utm_medium=plan_callout&utm_campaign=plan_upsell_enterprise&utm_content=" + page
};
const copy = COPY[plan][lang];
return
;
};
export const PlanBadge = ({plan, lang = "ko"}) =>
{({
pro: {
ko: "Pro+",
en: "Pro+",
ja: "Pro+"
},
team: {
ko: "팀 플랜",
en: "Team Plan",
ja: "チームプラン"
},
enterprise: {
ko: "엔터프라이즈",
en: "Enterprise",
ja: "エンタープライズ"
}
})[plan][lang]}
;
This is an Enterprise plan feature.
## What security do you get?
Organization security settings cover four areas.
* **Authentication**: Unify sign-in with your corporate identity system through SAML SSO.
* **Access control**: Restrict access to specific IPs and govern share link visibility with policies.
* **Personal data**: Mask personal information recorded in notes, like phone numbers and emails, with a masking policy.
* **Baseline security**: Encryption at rest, storage in the Seoul region, and no AI training on your data apply to every plan. See [Privacy and security](/en/guide/privacy/overview).
## Unify sign-in with SSO
Tiro supports SAML-based SSO. Connect an IdP such as Okta or Azure AD (Microsoft Entra ID), and your team signs in to Tiro with their corporate accounts.
* You can run SSO-only. Block other methods like email and social sign-in, and account management lives entirely in your IdP.
* Closed-network environments without direct access to external authentication services are supported too.
IdP setup happens together during onboarding.
## Restrict access to your network
Limit workspace access to approved IPs only. This allows connections through your corporate network or VPN exclusively. If you need a static IP to register in your firewall, that's supported as well. The exact configuration is worked out during onboarding.
## Turn on personal data masking
Turn on personal data masking as an organization policy, and personal information in newly created notes, like phone numbers, emails, and ID numbers, is masked automatically in the transcript and documents. This option fits environments like call centers, where customer personal data comes up often in conversations.
Masking is decided when a note is created. Once the policy is on, it applies to notes you create afterward and doesn't change notes already saved. If the option is enabled for your organization, an organization admin can turn it on and off directly with the **\[Personal info masking]** toggle in the **\[Security]** tab of the organization settings.
## Control share links
Manage the maximum visibility, longest expiry, and allowed company domains for share links through policy, and revoke active links from one place. For details on how this works, see [Link sharing security](/en/guide/sharing/link-security).
## Frequently asked questions
### Can I get security review materials?
Yes. Tiro holds ISO/IEC 27001:2022 certification and has completed both SOC 2 Type 1 and Type 2 examinations. Security review materials such as audit reports, data locations, and the subprocessor list are provided after an NDA is signed. Reach out to our sales team.
### Can I store data in a specific region only?
Note data is stored in the AWS Seoul region by default. If you need a dedicated VPC or a different region, that can be arranged in your contract.
### What does the onboarding process look like?
Leave an inquiry, and our sales team reviews your organization's security requirements and designs a tailored setup with you. A custom onboarding session and a hotline are included too.
***
**Related pages**: [Privacy and security](/en/guide/privacy/overview) · [Link sharing security](/en/guide/sharing/link-security) · [Tiro plans](/en/guide/workspace/plans)