Workspaces
Teams & responsibilities
Multi-user governance works when ownership, contribution, review, and decision authority are explicit.
Participation
- Invite users to the workspace and add them to the relevant Project.
- Assign task, control, evidence, finding, risk, and remediation owners.
- Use project responsibilities and RACI where configured to clarify who acts, reviews, contributes, and is informed.
Approval eligibility
Approval Policies can require eligible roles. For example, a step requiring the DPO role routes decision work to an appropriate member holding that role. Eligibility and project access are related but not interchangeable.
Reviewer responsibilities
- Check whether evidence supports the stated claim.
- Record rationale, limitations, and follow-up work.
- Avoid approving your own work where separation of duties applies.