Feature
Access & security: 2FA, SSO, SCIM and IP allowlist
Two-factor authentication and an audit log on every plan; SSO over SAML or OIDC, SCIM provisioning and an IP allowlist from Business Pro.
The tooling for a clean rollout is part of the product at Zuuna, not part of an enterprise quote. What every team needs is on every plan; what an IT department needs starts at Business Pro.
On every plan, including free
Two-factor authentication: enforced across the whole workspace if you want it, with an authenticator app and recovery codes. Plus roles and permissions as a grid rather than an on/off switch, and an audit log over security-relevant changes. No plan gate, because enforcing a second factor is not something anyone should have to pay extra for.
From Business Pro
Single sign-on over SAML 2.0 or OpenID Connect, SCIM for provisioning and de-provisioning accounts automatically, and an IP allowlist for workspaces that should only be reachable from certain networks. The same three things a privacy review asks about first.
Where the data lives
In Germany, with a data processing agreement under Art. 28 GDPR (no sales call, no surcharge). The processors we use are named in the privacy policy. What we do not have, we say as well: no ISO 27001 or SOC 2 certification, so there is no badge on this page. What is verifiable instead: servers in Germany, a DPA under Art. 28 GDPR without a sales call, named sub-processors, and the technical and organisational measures under Art. 32 in Annex 2 of that DPA.
And when you leave
Every board as an Excel or CSV file, your personal data as a JSON export in one click (on every plan). An account you cannot leave is not a demonstration of trust.
Step by step
The two most common tasks, as walkthroughs: enforce two-factor authentication.
Walkthrough
From the first sign-in to an enforced login through your identity provider: set up single sign-on (SAML or OIDC).
FAQ
Does two-factor authentication cost extra?
No. 2FA is on every plan including the free one, and can be made mandatory for the whole workspace.
From which plan do I get SSO and SCIM?
Business Pro and up. SSO runs over SAML 2.0 or OpenID Connect; SCIM handles creating and removing accounts from your directory.
Is a DPA available?
Yes, under Art. 28 GDPR, published on the site (without a sales call and at no extra cost).
Is Zuuna ISO 27001 or SOC 2 certified?
No. We hold neither certification and do not claim otherwise. What security features exist is stated openly on this page and on the trust page.