Who at Cirro Gets Access to Our Zoho Org?

Who at Cirro gets access to our Zoho org, and for how long?

Access is granted by you, held by named individual consultants working on your project, and scoped to what the work requires. You control it through your own Zoho administration, you can see exactly what was done in your audit log, and you can revoke access at any time without asking us. Access is removed at project close unless you have an ongoing support arrangement.

How access works

  • Named users, not shared logins. Each Cirro consultant on your project has their own user in your org, so every action in your audit log is attributable to a person.
  • You are the administrator. Cirro works inside your org under permissions you set. You are not handing over ownership of your system.
  • Scoped to the work. A consultant working on your finance module does not need access to your sales data, and access is set accordingly.
  • Revocable by you, at any time. No notice, no request to us. It is your org.
  • Removed at close. Unless you have an ongoing support arrangement, in which case access is agreed as part of it.

Why this matters more than a policy statement

Any partner can tell you their people are trustworthy. What actually protects you is that access sits in your control, is attributable to named individuals, and leaves a record you can read. Ask any partner whether they use shared logins, and treat the answer as informative.

What this means for you

Review the user list in your Zoho org periodically, including after any project ends. This applies to every vendor you have ever granted access to, not only to us.

Next step

For how records are handled specifically during a migration, read How does Cirro handle our data during migration?

Related articles