LONNA Staff Access Policy
How Alphabridge staff can and cannot reach a customer's data in LONNA.
1. The rule
System administrators (developers) can manage LONNA itself: users, subscriptions, tax tables, settings. They cannot open a customer's companies, employees, payslips or reports unless the customer's account owner has approved it.
2. How access is requested
The administrator names the customer, gives a reason, chooses view-only or full access and a time (1, 4, 8 or 24 hours). The account owner receives an e-mail and approves or declines. Requests not answered within 48 hours lapse.
3. While access is active
Access ends by itself at the end of the time. The customer can end it earlier at any moment. Every page the administrator opens is recorded with the time and the person, and the customer can read that list under Support access.
4. Urgent access
If the owner of the system has switched urgent access on, an administrator can open a customer's data view-only for 2 hours without waiting. The customer is told by e-mail at once and sees what was opened. It is for real emergencies only.
5. Who controls the control
Only the owner of the system can add or remove administrators and switch urgent access on or off. No other administrator can change this or the main administrator's account.
6. Limits
These controls apply inside LONNA. People with direct access to the server or database could technically reach stored data, so server logins are kept to the minimum number of people, are personal, and are never shared.