Managing your organisation
How to invite team members, set access controls, manage tools and credentials, enable deployment governance, and keep an audit trail — all on a single Pro workspace.
Accessing workspace settings
Open your workspace at /workspace and click your workspace name at the top of the left sidebar. This opens a settings panel where you can view current members and send email invitations directly. For the full settings page — including governance controls, audit log, and billing — click Full workspace settings at the bottom of the panel, or go to /orgs/{your-slug} directly. Credentials are managed from the Tools panel directly in the workspace sidebar.
Creating an org
Any Envelope user can create an org from the new org page. Choose a slug carefully — it appears in all governance and audit URLs and can't be changed once set.
| Tier | Includes |
|---|---|
| Free org | Members, invitations, basic settings |
| Pro org ($39/mo) | Vault, governance, audit log, analytics, 14-day trial |
| Scale org ($99/mo) | All Pro features, higher run limits, priority support |
Upgrade or downgrade from the org billing tab at any time. Downgrading from Pro disables the vault and governance features but doesn't delete any stored data — you can reactivate by upgrading again.
Members and roles
Invite members from the org Members tab using their email address. Each member is assigned a role that controls what they can do:
| Action | Member | Admin | Owner | |---|:---:|:---:|:---:| | View org settings | ✓ | ✓ | ✓ | | Install teams (with governance) | ✓ | ✓ | ✓ | | View audit log | ✓ | ✓ | ✓ | | Invite members | — | ✓ | ✓ | | Approve/reject governance requests | — | ✓ | ✓ | | View tools and connection status | ✓ | ✓ | ✓ | | Manage tools and credentials | — | ✓ | ✓ | | View analytics | — | ✓ | ✓ | | Manage billing | — | — | ✓ | | Delete org | — | — | ✓ |
Only the org owner can manage billing, transfer ownership, or delete the org. Admins can do everything else — inviting members, approving governance requests, managing tools and credentials, and viewing analytics.
Tools and credentials (Pro)
The Tools panel in the workspace sidebar is where admins manage the credentials your AI teams need to run. Register a service (e.g. Stripe, Slack, Salesforce) as a tool, then add the corresponding API keys. All teams in the workspace can reference vault secrets by name — installs retrieve them at run time without exposing values to members.
Credential values are encrypted at rest. Admins and owners can add and delete credentials but cannot read values back after saving. Members can see which tools are connected and which have missing credentials, but cannot add or change them.
Typical use: Store your OpenAI API key once in the Tools panel. Every member who deploys a team using OpenAI draws from the shared key — and you rotate it in one place when it expires.
Deployment governance (Pro)
Enable governance from the org Settings tab. Once enabled, any install by a member goes into a pending state and requires explicit approval from an admin or owner before it goes live.
- Member submits a deployment request with the team name and install ID
- All org admins and owners receive an email notification
- An admin reviews the request in the Governance tab and approves or rejects it (with an optional note)
- The requesting member receives an email with the decision
- Approved installs go live; rejected installs remain inactive
Every governance action is recorded in the audit log. Governance can be disabled at any time — existing approved installs continue running.
Audit log (Pro)
Every significant org action is recorded in an immutable audit log:
- Member invited / joined / removed
- Governance enabled / disabled
- Approval requested / approved / rejected
- Vault secret created / deleted
- Org plan changed
- Billing method added / removed
The audit log is visible to all org members and is filterable by event type and actor. It cannot be deleted or modified — it's a permanent record.