One Base for the whole organization. Every file still readable only by its people.

A Base is a room with the organization switch on. Its owners, one person or equal partners with a vote, name admins who manage people, doors and rooms without owning it. Approval rules decide who must agree before anything is deleted, shared out, someone is invited or the rules change: nobody, an owner, a named person, a number of partners or a share of them.

Its policies flow down to every room in it: two-factor sign-in for everyone, nothing shared outside it, how long files are kept, how long a session lasts and which ways of signing in count. People join by invitation, by email, QR code or link, and see the role and every rule before they accept.

A Base whose rooms are Bases: a firm with offices, a school with departments. Its settings flow down to every Base inside, each Base keeps its own admins, and the bill shows each one’s share.

An organization can sign a Business Associate Agreement for a Base in HIPAA mode. HIPAA mode requires two-factor sign-in for everyone in it and keeps an access log its owners and admins can read: sign-ins, devices, and how many files each person opened and changed each day, never a file’s name or what’s in it. HIPAA has no official certification; the agreement sets out what Terebyte does, and what HIPAA asks of the organization stays the organization’s.

Your people sign in through your own identity provider (SAML or OpenID Connect), with addresses on the email domains your organization has proved it owns, and your member list can stay in step through SCIM. It signs them in; it never opens their files, which still open only with each person’s own passphrase or recovery key.

Staff accounts are invoiced to the organization each month. See the company guides for adding and removing people and for billing.