Skip to content
Corveek
All articles
Product · 3 min read

One identity, many workspaces

An accountant who works with three companies should not need three logins. Getting that right shaped the login screen, the session and the database.

A great deal of business software assumes one person belongs to one company. Real work does not: an accountant serves several clients, a consultant sits inside two organizations, a founder runs a holding company and its subsidiary. Asking them to keep three passwords is a design failure dressed up as security.

Your account is yours

In Corveek your email identifies you across the entire platform, not within one organization. What an organization owns is your membership of it — and the roles that come with that membership. The same person can be an administrator in one workspace and read-only in another, with one password and one sign-in.

No form asks which company you are

Not the login page, not registration, not password reset. Asking would be redundant, because your membership already answers it, and unsafe, because it invites a browser to name an organization it may not belong to. Signing in establishes who you are; your memberships decide where you land.

Switching is a server decision

The workspace switcher in the header re-checks your membership on the server and issues a fresh session for the new workspace, then reloads the page so nothing from the previous organization stays on screen. Naming an organization you do not belong to returns "not found" — the switcher cannot be used to discover which companies exist.

Belonging to nothing is a valid state

Registering creates an identity, never an organization. Until an administrator adds you, you are signed in and shown exactly that, with the email address they need to use. It is a normal state with a clear explanation, not an error and not a locked door.

See how this works on your data

We will set up a workspace with your modules and roles, and show you the parts that matter to your team.

Keep reading