> ## Documentation Index
> Fetch the complete documentation index at: https://docs.alana.shopping/llms.txt
> Use this file to discover all available pages before exploring further.

# Workspaces

> Understand workspace isolation, settings, and multi-tenant architecture.

## Overview

A **workspace** is the top-level organizational unit in Alana Shopping B2B. Every resource — brands, catalogs, products, members, and billing — belongs to exactly one workspace.

Workspaces provide complete data isolation. Row-level security policies ensure that a member of Workspace A can never access data from Workspace B, even at the database level.

## Workspace properties

| Property                | Description                                                          |
| ----------------------- | -------------------------------------------------------------------- |
| `name`                  | Display name of the workspace                                        |
| `slug`                  | URL-safe identifier, auto-generated from name                        |
| `plan`                  | Current billing plan: `standard`, `pro`, `business`, or `enterprise` |
| `industry`              | Industry vertical for tailored AI recommendations                    |
| `company_size`          | Size bracket for plan limits and onboarding                          |
| `allowed_email_domains` | Restrict invitations to specific email domains                       |
| `ai_training_opt_out`   | Whether workspace data is excluded from AI model training            |

## Workspace lifecycle

<Steps>
  <Step title="Creation">
    A workspace is created during the post-auth setup flow. The creating user becomes the **owner**.
  </Step>

  <Step title="Onboarding">
    The onboarding wizard guides the owner through industry selection, brand creation, and optionally loading sample data.
  </Step>

  <Step title="Active use">
    Members are invited, brands and catalogs are created, and the workspace operates normally.
  </Step>

  <Step title="Export / Deletion">
    Owners can export all workspace data (GDPR-compliant) or permanently delete the workspace.
  </Step>
</Steps>

## Security settings

Each workspace has configurable security policies:

* **Session timeout** — automatic logout after inactivity
* **2FA enforcement** — require two-factor authentication for all members
* **IP allowlisting** — restrict API access to specific IP ranges
* **Force logout** — immediately end all active sessions workspace-wide

<Info>
  Security settings can only be modified by the workspace **owner** or **admin**.
</Info>