Data isolation and access
Organization scoping, Shared and Private deployments, Admin and Coach permissions, encrypted credentials, audit logs, and talent-pool consent.
On this page
Organizations
An organization is the placement team’s account. Candidates, clients, outreach, the mailbox, branding, and the license belong to it. Portal pages, exports, and the MCP partner tools read only the signed-in member’s organization.
Shared and Private
| Plan | Price | Included seats | What it is |
|---|---|---|---|
| Partner Shared$999/mo · 5 seats | $999/mo | 5 | Multi-tenant Partner Portal — candidates, AI matching, branded outreach, placements. |
| Partner Private$2,499/mo starting · 25 seats | $2,499/mo starting | 25 | Dedicated Kyrolane instance + database. Same portal, stronger isolation. Custom quotes welcome. |
Partner Private is a dedicated Kyrolane instance and database running the same portal. Partner Shared is the multi-tenant service.
Roles
| Action | Admin | Coach |
|---|---|---|
| Open the portal, team list, and analytics | ✓ | ✓ |
| Manage candidates and clients they added or are assigned | ✓ | ✓ |
| Manage every candidate and client | ✓ | — |
| Save SMTP passwords, OAuth tokens, and compliance mail settings | ✓ | — |
| Export the whole roster | ✓ | — |
The full matrix is in Admin and Coach.
Credentials
SMTP passwords and OAuth tokens for the organization mailbox are encrypted before they are stored. Only admins can save them.
Audit logs
- Partner exports are recorded in the privacy audit log with the export type.
- MCP tool calls are audited. Payloads, emails, and tool arguments are dropped from the audit record.
AI assistants
Assistants connect with OAuth 2.1 and PKCE, or a personal token. Tokens expire, refresh tokens rotate, and disconnecting takes effect on the next request. See AI assistants (MCP).
Talent-pool consent
Job seekers appear to agencies only if they join the Kyrolane talent pool. Joining or leaving is recorded as a consent event, and leaving stops new matching. See Talent pool.