Skip to content
XEVRION
Get started
Menu
ProductOverviewReviewProveControlObserveImproveHow it works
TeamsEngineeringSecurityComplianceOperations
CompanyAboutContactChangelogSecurity
ResourcesDocsGlossaryFAQPricingPrivacy

Control

The riskiest changes need a second owner

Sensitive owner actions wait for a second owner to agree. Their approval works once, for that exact call.

Get startedSee pricing →
app.xevrion.co.uk / settings / owner-actionsExample data

Waiting for a second owner

Owner actions
  • Change region to EUAsked by Dan R.1 of 2
  • Turn off two-person approvalAsked by Dan R.1 of 2
  • Export all decisionsAsked by Mia K.Done

Change region to EU

First owner
Dan R. · 11:02
Second owner
Waiting
Their approval
Works once, for this call
Recorded
Both names, signed

Always needs two

  • Region changes
  • Key changes
  • Role and SSO changes
  • Policy switch-off

Why it matters

What two-person approval changes

  • Sensitive owner actions wait for a second owner.
  • Their approval works once, for that exact call.
  • Both names go into the record.
  • One owner can change anything alone.
  • Region, key and role changes get no second look.
  • One stolen login is enough to do real harm.

The resultNo sensitive change is made alone.

What you get

Two-person approval, in practice

  • Covers the big levers

    Retention, legal hold, erasure, single sign-on, log export, roles, limits and region.

  • One use only

    The grant is tied to the exact call and lasts an hour.

  • Both names recorded

    Who asked and who agreed are in the log.

How it works

Step by step

  1. 1

    Owner asks

    For a protected change.

  2. 2

    Second owner agrees

    A one-time grant is made.

  3. 3

    Change runs

    Only the exact call that was approved.

  4. 4

    Logged

    Both people, the time and the change.

Questions

About two-person approval

Is it on by default?

You choose which protected actions need a second owner.

What if the second owner changes the request?

The grant no longer matches, so the change is refused.

Next

Works well with

Know what your agents did.

Start free. Guard your first agent in a few minutes, and keep a record anyone can check.

Get started freeSee pricing →
  • Free plan, no card
  • Signed, chained decisions
  • Checked offline, without us