Feature
Access & security: 2FA, SSO, SCIM and IP allowlist
Two-factor authentication and an audit log on every plan; SSO over SAML or OIDC, SCIM provisioning and an IP allowlist from Business Pro.
The tooling for a clean rollout is part of the product at Zuuna, not part of an enterprise quote. What every team needs is on every plan; what an IT department needs starts at Business Pro.
On every plan, including free
Two-factor authentication — enforced across the whole workspace if you want it, with an authenticator app and recovery codes. Plus roles and permissions as a grid rather than an on/off switch, and an audit log over security-relevant changes. No plan gate, because enforcing a second factor is not something anyone should have to pay extra for.
From Business Pro
Single sign-on over SAML 2.0 or OpenID Connect, SCIM for provisioning and de-provisioning accounts automatically, and an IP allowlist for workspaces that should only be reachable from certain networks. The same three things a privacy review asks about first.
Where the data lives
In Germany, with a data processing agreement under Art. 28 GDPR — no sales call, no surcharge. The processors we use are named in the privacy policy. What we do not have, we say as well: no ISO 27001 or SOC 2 certification, so there is no badge on this page. What is verifiable instead: servers in Germany, a DPA under Art. 28 GDPR without a sales call, named sub-processors, and the technical and organisational measures under Art. 32 in Annex 2 of that DPA.
And when you leave
Every board as an Excel or CSV file, your personal data as a JSON export in one click — on every plan. An account you cannot leave is not a demonstration of trust.
Step by step
The two most common tasks, as walkthroughs: enforce two-factor authentication.
Walkthrough
From the first sign-in to an enforced login through your identity provider: set up single sign-on (SAML or OIDC).
FAQ
Does two-factor authentication cost extra?
No. 2FA is on every plan including the free one, and can be made mandatory for the whole workspace.
From which plan do I get SSO and SCIM?
Business Pro and up. SSO runs over SAML 2.0 or OpenID Connect; SCIM handles creating and removing accounts from your directory.
Is a DPA available?
Yes, under Art. 28 GDPR, published on the site — without a sales call and at no extra cost.
Is Zuuna ISO 27001 or SOC 2 certified?
No. We hold neither certification and do not claim otherwise. What security features exist is stated openly on this page and on the trust page.