Skip to main content

Team Collaboration

Overview​

Inqura supports team-based work through organizations, role-based access control, and shared investigations. Teams can collaborate on investigations while maintaining security boundaries and audit trails.

Organizations​

What is an Organization?​

An organization is a team workspace that:

  • Contains investigations and evidence
  • Has its own members and roles
  • Has separate billing and quotas
  • Maintains isolated data boundaries

Personal vs Team Organizations​

Personal Organization

  • Created automatically for each user
  • Single member (owner only)
  • Good for individual work
  • Cannot be converted to a team organization; share individual inquiries by inviting people to them

Team Organization

  • Multiple members with roles
  • Shared investigations
  • Team billing
  • Collaboration features

Roles and Permissions​

Role Hierarchy​

RoleCreate InvestigationsEdit AllManage MembersBillingDelete Org
Owner✅✅✅✅✅
Admin✅✅✅❌❌
Member✅Own only❌❌❌
Viewer❌❌❌❌❌

Role Descriptions​

Owner

  • Full access to everything
  • Can delete the organization
  • Manages billing and subscription
  • Only one owner per organization

Admin

  • Can invite and remove members
  • Can edit any investigation
  • Cannot access billing
  • Cannot delete organization

Member

  • Can create investigations
  • Can only edit their own investigations
  • Can view team investigations (if shared)
  • Standard team member role

Viewer

  • Read-only access
  • Cannot create or edit
  • Useful for oversight or review
  • Cannot download evidence

Inviting Team Members​

Send an Invitation​

  1. Go to Settings → Team
  2. Click "Invite Member"
  3. Enter email address
  4. Select role (Admin, Member, or Viewer)
  5. Click "Send Invitation"

Invitation Process​

  1. Invitee receives email with unique link
  2. Link valid for 7 days
  3. Invitee creates account (or logs in)
  4. Invitee accepts invitation
  5. Invitee appears in team list

Managing Invitations​

View pending invitations in Settings → Team:

  • See sent invitations
  • Resend if needed
  • Cancel/revoke invitations

Switching Organizations​

Users can belong to multiple organizations.

How to Switch​

  1. Click organization name in header
  2. Select different organization from dropdown
  3. Context switches immediately

What Switches​

When you switch organizations:

  • Investigation list changes
  • Evidence is organization-specific
  • Billing reflects current org
  • AI usage tracked per org

Shared Investigations​

Visibility​

Investigations within an organization are visible to all members:

  • Owners and Admins can edit any investigation
  • Members can view all, edit their own
  • Viewers can only view

Ownership​

Each investigation has a creator/owner:

  • Shown in investigation list
  • Affects edit permissions for Members
  • Can be reassigned by Admins

Audit Trail​

All team actions are logged:

Member Actions

  • Join organization
  • Role changes
  • Removal from org

Investigation Actions

  • Create, edit, delete
  • Evidence uploads/downloads
  • Analysis generation
  • Report generation

Viewing Audit Logs​

(Admin/Owner feature)

  • View in organization settings
  • Filter by user, action, date
  • Export for compliance

Billing for Teams​

Subscription Levels​

PlanMembersAI GenerationsStorage
TrialSolo — cannot invite15 total (does not reset)2 GB
CoreSoloGenerous monthly allowance (see Settings > Billing)25 GB
ProNo fixed cap — each collaborator holds their own paid planGenerous monthly allowance (see Settings > Billing)100 GB

Quotas​

  • Storage quota applies to the organization as a whole
  • AI credits are counted per user per month; the enforced ceiling is on your own Settings > Billing > Usage page
  • There is no shared seat or credit pool — each collaborator holds their own paid plan
  • Pro collaboration has a second condition the plan table cannot show: an invitee who already has an account must be on a plan at least equal to the inviting owner's. A Pro owner cannot add a Core or Trial collaborator. (Enforced in app/api/inquiries/[investigation_id]/invite; for an invitee with no account yet, the check runs at acceptance time.)

Billing Management​

Only the Owner can:

  • View billing details
  • Update payment method
  • Change subscription
  • View invoices

Access via Settings → Billing.

Best Practices​

Team Structure​

  • Use descriptive organization names
  • Assign appropriate roles
  • Review membership regularly
  • Document role assignments

Collaboration​

  • Agree on naming conventions
  • Use clear investigation titles
  • Link evidence consistently
  • Document in investigator notes

Security​

  • Remove departed members promptly
  • Review Viewer access regularly
  • Audit evidence downloads
  • Use appropriate roles (principle of least privilege)

Onboarding​

  • Create orientation investigation as example
  • Document team workflows
  • Share naming conventions
  • Explain role expectations

Enterprise Features​

None of the following is available today. These are roadmap items without committed dates, listed so you can plan around their absence rather than expect them shortly. If any is a requirement for your deployment, raise it with us before purchase.

What is available today: multi-factor authentication via authenticator app (TOTP) or passkey / WebAuthn, role-based access control (Owner, Admin, Member, Viewer), and organization-scoped access enforcement.

SSO Integration — not available

  • SAML/OIDC federation to an enterprise or agency identity provider
  • Automatic provisioning
  • PIV/CAC for government

Identity today is Cognito-native only. There is no federation to Okta, Microsoft Entra, ADFS or any other IdP, and Login.gov is a roadmap item rather than a configuration step.

Advanced Audit

  • Extended log retention
  • Export to SIEM
  • Compliance reports

Custom Roles

  • Define custom permissions
  • Project-based access
  • Department segregation