✋ Moderation
Moderation is the approval step on plans with the Moderated access type. For each plan you appoint moderators and decide how many approvals a request needs: a threshold such as two of three, or everyone (unanimous). Your organisation can set which of the two applies by default.
Moderators receive each request on their phone and approve or deny it there. A convincing message is not an approval: a faked email or call opens nothing, because the decision happens on a device you trust.
Who moderates
- You choose the moderators per plan, from the people who understand that data best
- On a Data Backup plan the plan's creator is always a moderator, and the organisation owner can be added too
- On a Business Continuity plan neither the creator nor the owner can moderate, so those plans are moderated by other members
- With a threshold like two of three, a holiday never blocks the team, and no single person can wave requests through alone
Every decision leaves a trace
Approvals and denials are recorded in the audit trail with who decided and when. For a regulated business that record is the difference between believing access was controlled and being able to show it.