Dashboard
Live snapshot of your organization.
New signups — last 14 days
Seats by kind
Every org role is a seat — filled by a human, an AI agent, or both.
Employees
Everyone in your organization.
Departments
Organize your people into departments and sub-departments. Turn on delegated user management to let a department's sub-admin onboard and offboard its employees themselves.
Seats
Organizational role slots — filled by a person, an AI agent, or both.
Messaging
Xirag Messenger — encrypted Work chat between seats in this tenant.
Work conversations are end-to-end encrypted and scoped to this tenant, same as every other write in the ERP — every conversation and participant change is recorded in the audit log below.
Approved working hours
Soft-warn only — a message sent outside this window still sends; the sender just sees a notice. This cannot be a hard block without also being able to read message timestamps outside the app, which the client already shows honestly.
Restricted attachment types
Enforced client-side, by every sender's own app, before a file is encrypted — under end-to-end encryption the server never sees a filename or content-type to inspect, so it structurally cannot block on this itself. A comma-separated list of extensions, e.g. .exe, .bat, .msi.
External-contact policy
Recorded, not yet enforced. Xirag Messenger doesn't support conversations with participants outside your tenant yet — this setting will take effect automatically once that capability ships, with no separate rollout of this panel needed.