Account

Security baselines, MFA enforcement, recovery codes & data controls

Implement multi-factor authentication (MFA/Passkeys), session policies, and corporate data protection.

4 min read

Security controls

Velstrian Tenderworks enforces enterprise security controls to protect tender intellectual property and sensitive commercial proposals.

Recommended security configurations

  • MFA / Passkeys: Enforce TOTP or FIDO2/WebAuthn hardware passkeys for all organisation users.
  • Session Inactivity Timeout: Configure automatic sign-out after 15 to 60 minutes of inactivity.
  • IP Restriction: Restrict workspace logins to corporate VPN and office IP ranges.