Invitations & join requests

There are two ways a person becomes part of a company. One starts with an admin reaching out; the other starts with the person asking. Both end with an admin in control of who gets in.

Invitations — an admin invites you

The usual path. An admin or owner invites someone by email and chooses the role they'll have when they accept.

• The invite carries a secure, single-use token and an expiry date, so a stale invite can't be used indefinitely.
• It moves through clear states: pending → accepted (or declined, or expired if it lapses).
• When the person accepts, they join the company with the role the admin chose.

There can only be one pending invitation per email for a company at a time, so nobody ends up with duplicate invites.

Join requests — you ask to join

Sometimes a person already knows which company they belong to but doesn't have an invite. They can request to join, and an admin approves it.

• The request has its own token and an expiry (7 days).
• It moves through pending → approved (or denied, cancelled, or expired).
• When an admin approves it, the requester joins the company as a member, their email is confirmed, and they're set up with the company's default workspace to start in.

Only one pending request per person per company can exist at a time.

Next

• Members & access
• Roles & Permissions
• Companies & Workspaces overview