Team & billing

HexSign is built for teams, which in practice means it is built for the day somebody leaves. Owners, Admins, and Members get different powers, multi-factor authentication can be enforced across the org, and every certificate, profile, device, and identifier change is attributed to a person or a service credential in the audit log. Offboarding becomes a permission change rather than a passphrase rotation across five CI providers.

Read Team roles, MFA, and access control first if you are adding anyone beyond yourself: it covers what each role can do, how MFA is enrolled with TOTP or SMS, and how service credentials differ from user accounts when CI needs access. Trial, plans, and self-service Stripe billing covers the commercial half: what the trial includes, what happens when it ends, and how to change plan, seats, or payment details through the Stripe customer portal without opening a support ticket.