Ownership and compliance
Is the account the company's, or in a departing employee's inbox?
Whose e-mail opened the marketplace account, who holds the recovery phone, when does the e-seal expire? Passhield shows these risks item by item and prepares the evidence for an auditor or insurer on one page.
See the ownership risk
Accounts on a personal e-mail
If an account was opened with an employee's personal e-mail instead of a company address, the report warns you, so the account does not leave with them.
The code on one phone
Accounts whose verification code goes to one person's phone are listed, with a suggestion to move to an app-based code or the code inbox.
E-seal, e-signature and KEP
The expiry date and who holds the token are on the item; those expiring within 30 days show as a warning above the vault.
What the leaver still holds
At offboarding, accounts tied to the leaver and the tokens in their hands come on a separate list.
Ownerless items
Items with no owner, or whose owner no longer works here, are reported and handed over.
Passwords past due
Items past their change interval; their owners get a reminder.
Compliance report
One page for the auditor, the insurer or a new partner.
The compliance report gathers on one page the members' two-step sign-in status, the spread of roles, offboarding times and open tasks, access review dates, ownership and certificate risks, and whether the audit chain is intact.
The report is made of numbers; it contains no passwords or item names. Print it from the browser and keep it as a PDF.
Access review
Every three months: who should still reach what?
In a review round an admin confirms or removes each vault membership one by one. A removed grant marks the vault for key renewal; the round goes into the audit log.
When 90 days have passed since the last round, the overview screen and the compliance report remind you. The dates go into the report on their own.
A tamper-evident audit log
Chained entries
Each entry is bound to the one before. Updates and deletes are closed even in the database.
Daily summary e-mail
The organisation's owners receive the chain's last entry every day; a rewritten history is caught against it.
Filters
Filter by person, kind of action, object and date range; open each line's details.
Export
Download the log as a file and verify it offline with the command-line tool.
Password health
Find weak, reused and old passwords.
The report checks the passwords in the vaults you can reach: easy to guess, used on more than one account, past their change interval. The screen says plainly how many vaults it covers.
Passwords are checked only in your browser; none of them reach the server.
Frequently asked
Does the server see the ownership details?
No. The e-mail an account was opened with, the recovery phone and certificate dates are stored with the item's encrypted details. The risk report is worked out in the admin's browser.
Does the compliance report help with a KVKK audit?
The report is one piece of evidence that access is recorded and reviewed regularly. It does not replace a legal compliance assessment; it is part of the file you give your adviser or auditor.
Where is the e-seal PIN kept?
The PIN and PUK are in the item's secret part; only an authorised person can open them, and every opening is recorded. The expiry date and who holds the token are in the item's encrypted details.
See today which accounts depend on one person.
Bring your passwords over; the ownership risk and the compliance report are ready from the first day.