Audit log settings

Spend alert switches at 80 and 100 percent of plan, a hard-cap option with stated consequence, and a recipient email field.

Workspace branding panel with logo upload, accent color swatches, a subdomain field, and an honest note on where branding actually appears.

Ruled list of OAuth apps with scope badges, connected date, authorizing member, and an instant Revoke action per row.

Calm account settings panel with section navigation, editable profile fields, content toggles, and a language selector.

Three escalating workspace actions stating exactly what each destroys and what survives, with outline buttons.

Per-data-type retention period Selects with export and deletion consequence panels, a legal hold note, and a save bar.

Sending domain panel with a monospace DNS record grid, per-record verified badges, a from-address field, and a deliverability fallback note for unverified domains.

A guest access panel with an allow guests switch, a permitted email domain list, default permission options, and an active guest count row.

Data portability panel with an export card listing every included data type and an import dropzone with a dry-run promise before any write.

An IP allowlist panel with an enforcement switch, a list of CIDR ranges with owners and last match times, and an add range form.

Language and timezone selects with a live date and number format preview row and a first-day-of-week toggle.

Six permissions across three roles, with the honest custom roles roadmap note.