An agency works with other people's money and other people's ad accounts, so access here is not a detail. Roles decide who sees the finances, who confirms the actions that move money, and who only reads. Sign-in is protected by a second factor, every action is recorded, and the data of one organisation is out of reach of another on every single request.
14 days on any plan, no card needed to start. After the click: a three-field form and the workspace.
Access to ad accounts lives in the tokens of the organisation and is revoked on the platform side. The system neither stores nor asks for ad account passwords.
Screen recording: team roles, the second factor and active sessions, keys for outside systems, and the action log across the whole system.
An ads specialist does not need the agency finances, and a bookkeeper does not need bid controls. Roles split access to the money, to the settings, and to confirming the actions that move a budget.
A second factor with backup codes, and a list of active sessions with the option to close somebody else's. These are dull things that matter exactly once - and on that occasion they are either there or they are not.
The separation is not checked once at the door but on every endpoint that accepts a client identifier. A request carrying somebody else's identifier is refused, even when it comes from a fully authenticated user of another organisation.
Who confirmed a budget change, who switched a placement on, who granted access and who revoked it. The log is not there to punish anyone but to rebuild the picture when something has gone wrong.
Setting this up takes one evening, and then it needs no attention until the team changes.
Invite the team and give roles that match what each person does.
Above all for the people who confirm money actions.
Outside systems get keys of their own, not the account of a person.
How long data is kept and the rules for deleting it under agency policy.
Ad accounts hand over their statistics through your own OAuth apps. The system puts them into one picture, agents look for what to change, and only what you approve gets changed.
Early access
We are opening access to agencies in turn. Leave a work email and we will write when your turn comes, then help you connect the first account.
Only if their role carries that access. Finances, contractor payouts and profit by client are closed off separately from the day-to-day advertising screens.
The request is refused. Client ownership is checked on every endpoint that accepts it, not once at sign-in.
No. The connection runs on access tokens issued and revoked on the platform side. The lifetime and scope of each token show in the Connection health section.
With a key of its own in the keys section, rather than a shared human account. The key is revoked independently, and its use shows in the log.
The first 14 days are free on any plan and you do not need a card to start. The second factor, the action log and the separation of organisations work on every plan.
14 days on any plan, no card needed to start. After the click: a three-field form and the workspace.
