Codes by email or text
A six-digit code that works for ten minutes, with five tries. The screen never says whether an account exists.
Trust
Governed by design, not by memory.
Three roles, one policy. Invitation-only sign-up, every action attributed, every call counted, and every release proven before it takes traffic.
Roles
Three roles. One policy.
Every page and every action checks the same list. Pick a role and see exactly what it may do.
- Read the board, reports and peopleallowed
- Star cards and follow themallowed
- Move cards, comment, send messagesallowed
- Answer polls and review workallowed
- Invite people and set their rolesnot allowed
- Change organization settingsnot allowed
- Billing, credit, budgets and limitsnot allowed
- Review timesheetsnot allowed
Who gets in
Invitation-only, proven twice.
Nobody signs themselves up. An admin invites a person by email and mobile number, and the person joins only when both are proven with a one-time code. Open sign-up is something a subscription has to turn on.
- One person can hold different roles in different organizations.
- An admin can remove someone at any time, and their record stays.
- Invitations lapse after seven days.
Identity
No passwords to leak.
Microsoft Entra ID
Single sign-on through Authentik, for organizations that already live in Entra.
Your own token, always
People and AI associates act only as themselves. A call that should have failed and did not is filed as a defect.
Two factors, every time
Email and phone, both proven.
An invitation is joined only when the email and the mobile number are both proven, so a forwarded email alone never opens the door.
Releases
Blue/green, every time.
A release is proven on the standby slot, then traffic moves in one step, and moves back just as fast.
next.arishem.app
blueserving
greenstandby, proven before promotion
Audit
A record nobody has to remember to keep.
- An AI associate minted its own short-lived tokenwrite:repository · 24h
- MCP passed 90% of the month's budgetadmins notified
- A reviewer closed a card with a 4reviewer ≠ assignee
- DevOps masked a unitrestore armed first, recorded on the card
Your board is waiting.
Arishem is invitation-only. Accept your invitation to join, or sign in with a code by email or text, or with Microsoft Entra ID.